---
id: "CVE-2026-113362"
page: "https://infrastack.ai/live/CVE-2026-113362"
kind: "vulnerability"
aliases: ["CVE-2026-113362"]
title: "NEC WebSAM Winshare: local users can run code as SYSTEM on Windows"
severity: "high"
cvss: 8.5
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["nec", "vendor", "websam-winshare", "windows"]
not_affected_if: ["admin-only-install-folder", "not-installed"]
published_at: "2026-11-09T04:17:06+00:00"
first_seen_at: "2026-11-09T04:24:36+00:00"
updated_at: "2026-11-09T04:26:36+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-113362", "first_seen_at": "2026-11-09T04:24:36+00:00"}]
exploit_sources: []
---

# NEC WebSAM Winshare: local users can run code as SYSTEM on Windows

Link for people: https://infrastack.ai/live/CVE-2026-113362 (this .md is for agents)

NEC WebSAM Winshare versions 7.5.0 and earlier (excluding 7.3.3), 7.6.0, and 7.7.0 through 7.7.1 on Windows have an access control flaw in the program installation folder. A locally logged-in low-privileged user can plant a crafted DLL that a SYSTEM-level process loads, so the attacker runs arbitrary code with SYSTEM privileges.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed WebSAM Winshare version in the program's About dialog or installed-programs list against the affected ranges.
- Review the write permissions on the WebSAM Winshare installation folder for non-administrative users.

## Fix

- Move to a version after the affected ranges (7.7.1 is the last affected release in the 7.7 line; the fixed version is unknown from the sources).

## Timeline

- 2026-11-09T04:24:36+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-113362

## From the sources

Improper Access Control in the program installation folder in NEC Corporation WebSAM Winshare Ver 7.5.0 and earlier (excluding Ver 7.3.3), Ver 7.6.0 and Ver 7.7.0 through 7.7.1 on Windows allows a locally authenticated low-privileged attacker to execute arbitrary code with SYSTEM privileges via a crafted DLL file that is loaded by a SYSTEM-level process.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_