Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2026-7280

eMPIA Technology|AVACAST - Unquoted Service Path

Description

AVACAST developed by eMPIA Technology has a Unquoted Service Path vulnerability, allowing privileged local attackers to place a malicious executable file in a specific directory, resulting in arbitrary code execution with system privileges when the AVACAST service starts.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

eMPIA Technology AVACAST

Default version status: unaffected

  • 0 to ≤ 5.10.10.43affected

References