CVE-2026-20893CWE-346

Origin validation error issue exists in Fujitsu Security Solution AuthConductor Client Basic V2 2.0.25.0 and earlier

High · published January 7, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
2.0
In the wild
Unconfirmed
What it is

⚡ A sneaky origin validation error lurks in Fujitsu's AuthConductor Client! An attacker with system access could potentially execute arbitrary code with SYSTEM privileges. 🤯 Imagine you're at a VIP event, and someone sneaks in with a fake invite. They could walk right up to the host and change the entire guest list without anyone batting an eye! That's what this vulnerability allows an attacker to do within your Windows system. If exploited, an attacker can not only execute arbitrary code but also modify critical registry values, compromising the entire system. This could lead to unauthorized access, data breaches, or even complete control of your system – absolutely devastating!

Put simply

Imagine you're at a VIP event, and someone sneaks in with a fake invite. They could walk right up to the host and change the entire guest list without anyone batting an eye! That's what this vulnerability allows an attacker to do within your Windows system. This vulnerability arises from a failure to properly validate the origin of requests made to the Fujitsu Security Solution AuthConductor Client. This oversight allows logged-in users to escalate their privileges and execute unauthorized commands.

What to do

If exploited, an attacker can not only execute arbitrary code but also modify critical registry values, compromising the entire system. This could lead to unauthorized access, data breaches, or even complete control of your system – absolutely devastating! Immediately upgrade to version 2.0.25.1 or higher to patch this vulnerability. Additionally, review user access levels and consider implementing stricter account controls to minimize the risk. Performing a system audit might also help catch any potential misuse. You've got this! Take these steps and you'll have your system secured in no time. 🛡️

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00125 · 2.0th percentile
Weakness
CWE-346 · Origin Validation Error
Published
2026-01-07T03:16Z
EPSS history
Timeline
  • 07 JAN 03:16Z
    Origin validation error issue exists in Fujitsu Security Solution AuthConductor Client Basic V2 2.0.25.0 and earlier
    cvelistv5