CVE-2026-113362 · Vendor
NO FIX YET · SEE WHAT TO DO
NEC WebSAM Winshare versions 7.5.0 and earlier (excluding 7.3.3), 7.6.0, and 7.7.0 through 7.7.1 on Windows have an access control flaw in the program installation folder. A locally logged-in low-privileged user can plant a crafted DLL that a SYSTEM-level process loads, so the attacker runs arbitrary code with SYSTEM privileges.
first public Nov 9, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Windows machines running WebSAM Winshare 7.5.0 or earlier (except 7.3.3), 7.6.0, or 7.7.0 through 7.7.1. The risk requires a local, already-authenticated low-privileged user who can write to the installation folder. Machines without this product, or where the install folder is restricted to administrators, are less exposed.
Not affected if admin-only-install-folder, not-installed
Who cares nec, websam-winshare, windows
Improper Access Control in the program installation folder in NEC Corporation WebSAM Winshare Ver 7.5.0 and earlier (excluding Ver 7.3.3), Ver 7.6.0 and Ver 7.7.0 through 7.7.1 on Windows allows a locally authenticated low-privileged attacker to execute arbitrary code with SYSTEM privileges via a crafted DLL file that is loaded by a SYSTEM-level process.
This page as .md · .json · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.