CVE-2026-0487CWE-427

DLL Hijacking vulnerability in SAProuter on Microsoft Windows

High · published July 14, 2026

CVSS v3.1
8.4
EPSS
0%
Percentile
10.6
In the wild
Unconfirmed
What it is

SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files from an untrusted location, allowing them to execute malicious code on the system. This could enable the attacker to hijack the DLL loading process and achieve arbitrary code execution. This has high impact on confidentiality, integrity and availability of the system.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00210 · 10.6th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2026-07-14T00:17Z
EPSS history
Timeline
  • 14 JUL 00:17Z
    DLL Hijacking vulnerability in SAProuter on Microsoft Windows
    cvelistv5