CVE PROGRAM SOURCE RECORD7.0 High

CVE-2026-34488

IP Setting Software contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with admini

Status: Published
Published: 2026-04-23
Updated: 2026-04-23
Assigning organization: jpcert

Description

IP Setting Software contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrative privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

i-PRO Co., Ltd. IP Setting Software

prior to V5.20affected

References

https://i-pro.com/products_and_solutions/en/surveillance/solutions/technologies/cyber-security/psirt/security-advisories ↗
https://jvn.jp/en/jp/JVN42090270/ ↗