CVE-2026-6348CWE-306

Simopro Technology｜WinMatrix - Missing Authentication

Critical · published April 16, 2026

CVSS v4.0
9.3
EPSS
0%
Percentile
7.4
In the wild
Unconfirmed
What it is

WinMatrix agent developed by Simopro Technology has a Missing Authentication vulnerability, allowing authenticated local attackers to execute arbitrary code with SYSTEM privileges on the local machine as well as on all hosts within the environment where the agent is installed.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00182 · 7.4th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-04-16T01:53Z
EPSS history
Timeline
  • 16 APR 01:53Z
    Simopro Technology｜WinMatrix - Missing Authentication
    cvelistv5