CVE-2026-42936CWE-427

The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries

High · published July 15, 2026

CVSS v4.0
8.4
EPSS
0%
Percentile
6.9
In the wild
Unconfirmed
What it is

The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privilege of the user invoking the installer.

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00177 · 6.9th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2026-07-15T05:12Z
EPSS history
Timeline
  • 15 JUL 05:12Z
    The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries
    cvelistv5