← Back to browse · API

CVE-2023-26918

Severity
CRITICAL
CVSS
9.8
EPSS
0.06051
Risk score
41.32
CISA KEV
No
PoC
No
Published
2023-04-13
Modified
2025-02-07
First seen
2026-08-07
Aliases
EUVD-2023-30710, GHSA-W8C5-V27M-V5CH
Products
n/a:n/a n/a
Sources
euvd EUVD-2023-30710

Description

Diasoft File Replication Pro 7.5.0 allows attackers to escalate privileges by replacing a legitimate file with a Trojan horse that will be executed as LocalSystem. This occurs because %ProgramFiles%\FileReplicationPro allows Everyone:(F) access.

References