Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v53p-6626-4vj7

Опубликовано: 14 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.5
CVSS3: 8.4

Описание

Wondershare UBackit 2.0.5 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted path in the wsbackup service to inject malicious executables that would run with LocalSystem permissions during service startup.

Wondershare UBackit 2.0.5 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted path in the wsbackup service to inject malicious executables that would run with LocalSystem permissions during service startup.

EPSS

Процентиль: 3%
0.00015
Низкий

8.5 High

CVSS4

8.4 High

CVSS3

Дефекты

CWE-428

Связанные уязвимости

CVSS3: 8.4
nvd
25 дней назад

Wondershare UBackit 2.0.5 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted path in the wsbackup service to inject malicious executables that would run with LocalSystem permissions during service startup.

EPSS

Процентиль: 3%
0.00015
Низкий

8.5 High

CVSS4

8.4 High

CVSS3

Дефекты

CWE-428