CVE-2026-92838CWE-427

CVE-2026-92838

High · published September 17, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
9.1
In the wild
Unconfirmed
What it is

A DLL hijacking

vulnerability exists in the GeoVision GV-Remote E-Map desktop

application. The application loads one or more dynamic-link libraries (DLLs)

from an unsafe search path, allowing a local attacker to place a malicious DLL

in a location searched before the legitimate library location. If

successfully exploited, an attacker with local write access to the affected

directory could achieve arbitrary code execution in the security context of

the GV-Remote E-Map process.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00198 · 9.1th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2026-09-17T06:16Z
References (3)
EPSS history
Timeline
  • 18 SEP 04:02Z
    EPSS moved — → 0%
    epss
  • 17 SEP 01:50Z
    GeoVision GV-Remote E-Map dll hijacking vulnerability
    cvelistv5