{"id":"CVE-2026-113363","kind":"vulnerability","aliases":["CVE-2026-113363"],"related":[],"title":"NEC WebSAM WinShare: crafted packet lets remote attacker run commands as SYSTEM","description":"Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through 7.5.0, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthenticated attacker to execute arbitrary commands with SYSTEM privileges via a crafted network packet sent to the computer on which WinShare is running.","summary":"NEC WebSAM WinShare on Windows mishandles network packets because it does not validate input properly. A remote, unauthenticated attacker who sends a crafted packet to the machine running WinShare can execute arbitrary commands with SYSTEM privileges.","severity":"critical","cvss":9.3,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"WebSAM WinShare","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["nec-websam","other","windows","winshare"],"not_affected_if":["unknown"],"how_to_check":"- Check whether WebSAM WinShare is installed on Windows machines, and confirm its version against the affected range `7.2.0` through `7.7.2`.","fix":"- WebSAM WinShare versions `7.2.0` through `7.7.2` are affected; the sources do not name a fixed version.","status":"open","published_at":"2026-11-09T05:18:26+00:00","first_seen_at":"2026-11-09T05:25:17+00:00","triaged_at":"2026-11-09T05:26:52+00:00","updated_at":"2026-11-09T05:26:52+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-11-09T05:26:52Z","model":"claude-haiku-5-5","output":{"fix":"- WebSAM WinShare versions `7.2.0` through `7.7.2` are affected; the sources do not name a fixed version.","reach":"network","title":"NEC WebSAM WinShare: crafted packet lets remote attacker run commands as SYSTEM","impact":"high","summary":"NEC WebSAM WinShare on Windows mishandles network packets because it does not validate input properly. A remote, unauthenticated attacker who sends a crafted packet to the machine running WinShare can execute arbitrary commands with SYSTEM privileges.","audience":"businesses","category":"other","nicknames":[],"who_cares":["windows","nec-websam","winshare"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"Remote attacker runs arbitrary commands as SYSTEM on Windows machine","analyst_note":"Find NEC's advisory for CVE-2026-113363 to confirm the fixed version and any workaround; the NVD entry alone gives no fix.","how_to_check":"- Check whether WebSAM WinShare is installed on Windows machines, and confirm its version against the affected range `7.2.0` through `7.7.2`.\n- unknown for further checks: the sources do not say how to confirm exposure beyond the version.","plain_action":"","product_name":"WebSAM WinShare","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Organisations running NEC WebSAM WinShare versions 7.2.0 through 7.7.2 on Windows are affected, since the flaw is reachable over the network without credentials. The sources do not describe any configuration that limits exposure, so any reachable installation should be treated as exposed.","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.00078,"input_tokens":4598,"output_tokens":641,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'-113363':15A,18A '-2026':14A,17A '7.2.0':77C '7.5.0':79C '7.6.0':81C '7.7.0':84C '7.7.2':86C 'allow':89C 'arbitrari':58B,96C 'attack':8A,45B,93C 'command':10A,59B,97C 'communic':69C 'comput':109C 'corpor':73C 'craft':4A,49B,103C 'cve':13A,16A 'execut':57B,95C 'improp':63C 'input':40B,64C 'let':6A 'machin':53B 'mishandl':32B 'nec':1A,22B,27B,72C 'nec-websam':21B 'network':33B,68C,104C 'packet':5A,34B,50B,105C 'privileg':62B,100C 'process':70C 'proper':41B 'remot':7A,43B,91C 'run':9A,54B,114C 'send':47B 'sent':106C 'system':12A,61B,99C 'unauthent':44B,92C 'valid':39B,65C 'ver':76C,80C,83C 'via':101C 'websam':2A,19A,23B,28B,74C 'window':25B,31B,88C 'winshar':3A,26B,29B,55B,75C,112C 'winshare':20A","nicknames":[],"mitigations":[],"who_affected":"Organisations running NEC WebSAM WinShare versions 7.2.0 through 7.7.2 on Windows are affected, since the flaw is reachable over the network without credentials. The sources do not describe any configuration that limits exposure, so any reachable installation should be treated as exposed.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":["websamwinshare","winshare"],"ptokens":["websam","winshare"],"labels":["critical","necwebsam","other","vendor","windows","winshare"],"campaign_type":null,"search_a":"'-113363':15A,18A '-2026':14A,17A 'attack':8A 'command':10A 'craft':4A 'cve':13A,16A 'let':6A 'nec':1A 'packet':5A 'remot':7A 'run':9A 'system':12A 'websam':2A,19A 'winshar':3A 'winshare':20A","search_b":"'arbitrari':58B 'attack':45B 'command':59B 'craft':49B 'execut':57B 'input':40B 'machin':53B 'mishandl':32B 'nec':22B,27B 'nec-websam':21B 'network':33B 'packet':34B,50B 'privileg':62B 'proper':41B 'remot':43B 'run':54B 'send':47B 'system':61B 'unauthent':44B 'valid':39B 'websam':23B,28B 'window':25B,31B 'winshar':26B,29B,55B","search_c":"'7.2.0':77C '7.5.0':79C '7.6.0':81C '7.7.0':84C '7.7.2':86C 'allow':89C 'arbitrari':96C 'attack':93C 'command':97C 'communic':69C 'comput':109C 'corpor':73C 'craft':103C 'execut':95C 'improp':63C 'input':64C 'nec':72C 'network':68C,104C 'packet':105C 'privileg':100C 'process':70C 'remot':91C 'run':114C 'sent':106C 'system':99C 'unauthent':92C 'valid':65C 'ver':76C,80C,83C 'via':101C 'websam':74C 'window':88C 'winshar':75C,112C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-09T05:18:26+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"psirt-info@cyber.jp.nec.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113363","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113363","severity":null,"published_at":"2026-11-09T05:18:26+00:00","modified_at":"2026-11-09T05:18:26+00:00","first_seen_at":"2026-11-09T05:25:17+00:00","fetched_at":"2026-11-09T05:25:17+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}