CVE-2026-42936 — SBI SECURITIES Co.,Ltd. / HYPER SBI 2

CVE-2026-42936

SBI SECURITIES Co.,Ltd. / HYPER SBI 2 PUBLISHED

Description (CNA)

The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privilege of the user invoking the installer.

Affected (CNA)

Vendor / product	Versions
SBI SECURITIES Co.,Ltd. / HYPER SBI 2	affected 0 before ver.3.20.0

CWE

CWE-427

References

https://jvn.jp/en/jp/JVN59875262/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.