Live › vulnerability › CVE-2026-107090
Go to dashboardThe Maltego Windows Installer 4.13.0 resolves an executable in a way that lets a local attacker run arbitrary code. The sources do not give the exact resolution flaw or whether it escalates privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 16:31 UTC. All times on this page are UTC.
Machines where Maltego Windows Installer version 4.13.0 was run by a local user. The sources do not say whether a standard user can exploit it or only an administrator, and they do not describe the default install path. Remote attackers are not described as able to trigger it.
No product ranges from the sources yet.
4.13.0; the sources do not name the fixed version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code via the Maltego Windows installer executable-resolution logic
This page as .md · .json · in your agent: get_signal("CVE-2026-107090")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.