CVE-2026-8797

NEC Corporation / ExpressUpdate Agent for Windows PUBLISHED

Description (CNA)

An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If a malicious user gains access to the product, arbitrary code could be executed with SYSTEM privileges.

Affected (CNA)

Vendor / product	Versions
NEC Corporation / ExpressUpdate Agent for Windows	affected 3.24 and prior

CWE

CWE-782

References

https://jpn.nec.com/security-info/secinfo/nv26-004_en.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.