CVE-2026-118450 · Other
NO FIX YET
Venere, when installed outside Program Files, loads and registers unsigned components from folders an unprivileged user can write to. A local user could plant a component there that the application then runs or registers.
first public Nov 9, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Only installations of Venere placed outside Program Files, where unprivileged users can create files in the directories the product loads components from. Installs in Program Files are described as not affected by this issue. The sources do not name the affected versions.
Not affected if installed-in-program-files
Who cares venere, windows
Unknown from the sources.
No fix yet, per the sources.
Venere is installed outside Program Files and loads/registers unsigned components from locations where an unprivileged user may create files.
This page as .md · .json · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.