WEBSAM WINSHARE · CVE-2026-113363 · Other
NO FIX YET · SEE WHAT TO DO
NEC WebSAM WinShare on Windows mishandles network packets because it does not validate input properly. A remote, unauthenticated attacker who sends a crafted packet to the machine running WinShare can execute arbitrary commands with SYSTEM privileges.
first public Nov 9, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Organisations running NEC WebSAM WinShare versions 7.2.0 through 7.7.2 on Windows are affected, since the flaw is reachable over the network without credentials. The sources do not describe any configuration that limits exposure, so any reachable installation should be treated as exposed.
Not affected if unknown
Who cares nec-websam, windows, winshare
7.2.0 through 7.7.2.7.2.0 through 7.7.2 are affected; the sources do not name a fixed version.Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through 7.5.0, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthenticated attacker to execute arbitrary commands with SYSTEM privileges via a crafted network packet sent to the computer on which WinShare is running.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.