globalprotect-ca-cert-ipc

c2us.exe - 로그온한 사용자의 데스크톱 세션에서 실행 중인 사용자로 명령을 실행합니다. 이 경우 권한이 없는 사용자의 데스크톱 세션에서 cmd.exe를 SYSTEM으로 실행합니다. c2us.c - c2us.exe의 소스 코드. epinject.exe - 새 프로세스를 생성하고 해당 엔트리 포인트에 코드를 주입하는 데 사용되는 엔트리 포인트 인젝터입니다. loadgpsend.bin - epinject.exe를 사용하여 PanGPA.exe에 주입되는 페이로드로, 메인 익스플로잇 본체인...

CVE-2026-14478

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

CVE-2026-14478 Incorrect Permission Assignment in Autodesk Installer Named Pipes

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

CVE-2026-14478

The CVE-2026-14478 issue concerns Autodesk's installer named pipes. A malicious executable run on a victim machine could allow a local, low-privilege attacker to inject unauthenticated IPC messages into these named pipes, and to modify pipe permissions or ownership, with potential impact to confi...

PT-2026-71096

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A local low-privileged attacker can execute a maliciously created executable on a victim's machine to inject unauthenticated Inter-Process Communication IPC...