CVE-2026-66839

🗓️ 05 Aug 2026 04:26:13Reported by jpcertType

Authenticated attacker can exploit unquoted search path in NetKids iMark to run code as SYSTEM.

Reporter	Title	Published	Views	Family All 9
attackerkb	CVE-2026-66839	5 Aug 202604:26	–	attackerkb
Circl	CVE-2026-66839	5 Aug 202604:45	–	circl
Cvelist	CVE-2026-66839	5 Aug 202604:26	–	cvelist
EUVD	EUVD-2026-53044	5 Aug 202604:26	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in NetKids iMark	5 Aug 202606:41	–	jvn
NVD	CVE-2026-66839	5 Aug 202606:16	–	nvd
Positive Technologies	PT-2026-67954	5 Aug 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-66839: Unquoted Search Path or Element	5 Aug 202600:00	–	rapid7
Vulnrichment	CVE-2026-66839	5 Aug 202604:26	–	vulnrichment

[
  {
    "vendor": "Integrated Systems Technologies, Inc.",
    "product": "NetKids iMark",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "versionType": "semver",
        "lessThanOrEqual": "V5.2.5.0"
      }
    ]
  }
]

Source	Link
istinc	www.istinc.co.jp/dl/jpc/%E3%82%B5%E3%83%BC%E3%83%93%E3%82%B9%E3%81%AE%E5%AE%9F%E8%A1%8C%E3%83%95%E3%82%A1%E3%82%A4%E3%83%AB%E3%83%91%E3%82%B9%E3%81%8C%E5%BC%95%E7%94%A8%E7%AC%A6%E3%81%A7%E5%9B%B2%E3%81%BE%E3%82%8C%E3%81%A6%E3%81%84%E3%81%AA%E3%81%84%E3%81%93%E3%81%A8%E3%81%AB%E3%82%88%E3%82%8B%E6%A8%A9%E9%99%90%E6%98%87%E6%A0%BC%E3%81%AE%E5%95%8F%E9%A1%8C%E3%81%A8%E5%AF%BE%E5%BF%9C.pdf
jvn	www.jvn.jp/en/jp/JVN28045338/
istinc	www.istinc.co.jp/dl/jpc/DLL%E3%83%95%E3%82%A1%E3%82%A4%E3%83%AB%E3%81%AE%E8%AA%AD%E3%81%BF%E8%BE%BC%E3%81%BF%E3%81%8A%E3%82%88%E3%81%B3%E3%82%A4%E3%83%B3%E3%82%B9%E3%83%88%E3%83%BC%E3%83%AB%E3%83%95%E3%82%A9%E3%83%AB%E3%83%80%E3%81%AE%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E6%A8%A9%E9%99%90%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E5%95%8F%E9%A1%8C%E3%81%A8%E5%AF%BE%E5%BF%9C.pdf

28 Aug 2026 16:09Current

7.4High risk

Vulners AI Score7.4

CVSS 36.7

CVSS 48.4

EPSS0.00198

SSVC

CWE-428