CVE-2026-5789
HIGH
MEDIUM
Priority: 0.01
BB Relevance:
42/100
Published: 2026-04-21
Modified: 2026-11-11
First seen: 2026-11-11
Status: active
Attack Surface
Low Complexity
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
X
AT:
None
VC:
High
VI:
High
VA:
High
Description
Vulnerability related to an unquoted search path in CivetWeb v1.16. This vulnerability allows a local attacker to execute arbitrary code with elevated privileges by placing a malicious executable in a directory that is scanned before the intended application path (C:\Program Files\CivetWeb\CivetWeb.exe --), due to the absence of quotes in the service configuration.
Weakness Classification (1)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| civetweb_project | civetweb | 1.16 |
References & Advisories (1)
Third Party Advisory