CVE-2024-14047 Improper Link Resolution Before File Access ('Link Following') in Winlogbeat Leading to Arbitrary File Write and Denial of Service

A local vulnerability in the Winlogbeat Windows installer caused runtime files to be placed in a directory writable by unprivileged users. A low-privileged attacker with existing access to the system could pre-position malicious filesystem links, causing a subsequent elevated Winlogbeat operation...

Winlogbeat 8.13.0 Security Update (ESA-2024-49)

Improper Link Resolution Before File Access 'Link Following' in Winlogbeat Leading to Arbitrary File Write and Denial of Service A local vulnerability in the Winlogbeat Windows installer caused runtime files to be placed in a directory writable by unprivileged users. A low-privileged attacker wit...

CVE-2026-12663

ControlFLASH™ (Rockwell Automation) contains an improper access control flaw: its installer grants write permissions to the "Everyone" group on the product installation directory. This misconfiguration allows a local attacker to achieve arbitrary code execution at the logged-in user's privilege l...

CVE-2026-12663 ControlFLASH ® – Improper Access Control

A security issue exists within ControlFLASH™, where the installer grants write permissions to the "Everyone" group on a product installation directory. This could allow arbitrary code execution, resulting in an attacker being given the ability to run any commands or code of the attacker's choice ...

EUVD-2026-69136

A security issue exists within ControlFLASH™, where the installer grants write permissions to the "Everyone" group on a product installation directory. This could allow arbitrary code execution, resulting in an attacker being given the ability to run any commands or code of the attacker's choice ...

CVE-2026-16675

A privilege escalation vulnerability exists in Rockwell Automation FactoryTalk® Activation Manager . The root cause is custom installer actions that spawn visible console windows running with SYSTEM privileges during installation or repair operations. An authenticated attacker holding valid Windo...

CVE-2026-16675 Rockwell Automation FactoryTalk® Activation Manager - Privilege Escalation

A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custom actions in the installer that spawn visible console windows running with SYSTEM privileges during installation or repair operations. An authenticated attacker with Windows...

EUVD-2026-69128

A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custom actions in the installer that spawn visible console windows running with SYSTEM privileges during installation or repair operations. An authenticated attacker with Windows...

PT-2026-84212

Name of the Vulnerable Software and Affected Versions ControlFLASH versions 15.07 and earlier Description The installer grants write permissions to the Everyone group on the product installation directory. This flaw allows for arbitrary code execution, enabling an attacker to run any commands or...

CVE-2026-82649

SiYuan Windows installer before version 3.8.1 affected versions = 2.0.14 contains an uncontrolled search path element vulnerability in its NSIS installer, which invokes system executables such as TASKKILL by name rather than by absolute path. Because NSIS nsExec::Exec resolves these calls using a...

CVE-2026-82649

SiYuan Windows installer versions >= 2.0.14 and before 3.8.1 contain an uncontrolled search path vulnerability in its NSIS installer . The installer invokes system executables such as TASKKILL by name rather than by absolute path, and because NSIS nsExec::Exec resolves these calls using a sear...

EUVD-2026-68235

SiYuan Windows installer before version 3.8.1 affected versions = 2.0.14 contains an uncontrolled search path element vulnerability in its NSIS installer, which invokes system executables such as TASKKILL by name rather than by absolute path. Because NSIS nsExec::Exec resolves these calls using a...

CVE-2026-82649 SiYuan before 3.8.1 Local Privilege Escalation via Uncontrolled Search Path

SiYuan Windows installer before version 3.8.1 affected versions = 2.0.14 contains an uncontrolled search path element vulnerability in its NSIS installer, which invokes system executables such as TASKKILL by name rather than by absolute path. Because NSIS nsExec::Exec resolves these calls using a...

CVE-2026-82649 SiYuan before 3.8.1 Local Privilege Escalation via Uncontrolled Search Path

SiYuan Windows installer before version 3.8.1 affected versions = 2.0.14 contains an uncontrolled search path element vulnerability in its NSIS installer, which invokes system executables such as TASKKILL by name rather than by absolute path. Because NSIS nsExec::Exec resolves these calls using a...

PT-2026-83575

SiYuan Windows installer before version 3.8.1 affected versions = 2.0.14 contains an uncontrolled search path element vulnerability in its NSIS installer, which invokes system executables such as TASKKILL by name rather than by absolute path. Because NSIS nsExec::Exec resolves these calls using a...

CVE-2026-54550

IzPack is a widely used tool for packaging applications on the Java platform as cross-platform installers. In 5.2.6 and earlier, UnpackerBase.unpack in izpack-installer/src/main/java/com/izforge/izpack/installer/unpacker/UnpackerBase.java obtains an attacker-controlled PackFile targetPath, passes...

CVE-2026-54550 IzPack: Path Traversal in UnpackerBase allows writing files outside the installation directory via malicious pack entries

IzPack is a widely used tool for packaging applications on the Java platform as cross-platform installers. In 5.2.6 and earlier, UnpackerBase.unpack in izpack-installer/src/main/java/com/izforge/izpack/installer/unpacker/UnpackerBase.java obtains an attacker-controlled PackFile targetPath, passes...

CVE-2026-54550

IzPack versions 5.2.6 and earlier contain a path traversal vulnerability in UnpackerBase.unpack(). The method passes an attacker-controlled PackFile targetPath through IoHelper.translatePath(), which only converts separators without normalizing ../ segments or enforcing directory containment. A t...

CVE-2026-54550 IzPack: Path Traversal in UnpackerBase allows writing files outside the installation directory via malicious pack entries

IzPack is a widely used tool for packaging applications on the Java platform as cross-platform installers. In 5.2.6 and earlier, UnpackerBase.unpack in izpack-installer/src/main/java/com/izforge/izpack/installer/unpacker/UnpackerBase.java obtains an attacker-controlled PackFile targetPath, passes...

PT-2026-82113

Name of the Vulnerable Software and Affected Versions IzPack versions 5.2.6 and earlier Description IzPack is a tool for packaging Java applications as cross-platform installers. The unpack function within the UnpackerBase class fails to properly validate the targetPath of pack-file entries...