CVE-2026-32680CWE-276

The installer of RATOC RAID Monitoring Manager for Windows allows to customize the installation folder

High · published March 26, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
3.9
In the wild
Unconfirmed
What it is

The installer of RATOC RAID Monitoring Manager for Windows allows to customize the installation folder. If the installation folder is customized to some non-default one, the folder may be left with un-secure ACLs and non-administrative users can alter contents of that folder. It may allow a non-administrative user to execute an arbitrary code with SYSTEM privilege.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00151 · 3.9th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2026-03-26T06:55Z
EPSS history
Timeline
  • 26 MAR 06:55Z
    The installer of RATOC RAID Monitoring Manager for Windows allows to customize the installation folder
    cvelistv5