{"id":"CVE-2026-26846","kind":"vulnerability","aliases":["CVE-2026-26846"],"related":[],"title":"Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute…","description":"Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute arbitrary code via the UtilityManagerEx.exe component","summary":"Buffer overflow (CWE-120) in UtilityManagerEx.exe of Weinview (Weintek) EasyBuilder Pro build 6.10.01.510_20251022, CVSS 9.8 per CNA. Reported Dec 2025, disclosed 2026-10-16 by PRISMI-Team. No vendor advisory, no public PoC, no known exploitation. UtilityManagerEx.exe is likely an engineering-workstation utility, so exposure is probably limited to OT/engineering networks (inference, not confirmed).","severity":"critical","cvss":9.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"EBPro (EasyBuilder Pro)","fixed":[],"affected":"6.10.01.510_20251022","ecosystem":"vendor"}],"ecosystems":[],"tags":["ebpro","hmi","industrial-software","infrastructure","ot","weintek","windows"],"not_affected_if":["no-network-exposure","other-versions-unverified"],"how_to_check":"Check the installed EBPro version (Help > About in EasyBuilder Pro, or the install folder). Build 6.10.01.510_20251022 is the only confirmed affected build; other builds are unverified. Check whether UtilityManagerEx.exe is running or listening (netstat -ano, tasklist) and keep it off untrusted networks.","fix":"No vendor-confirmed fix. Weinview lists newer builds (EBPro V6.10.02.421_20260827, V6.10.01.667_20260827); their release notes do not mention this CVE, so confirm with Weinview before relying on them. Meanwhile, firewall engineering workstations from untrusted networks.","status":"open","published_at":"2026-10-16T16:17:06+00:00","first_seen_at":"2026-10-23T21:57:13+00:00","triaged_at":"2026-10-23T22:05:06+00:00","updated_at":"2026-10-23T23:32:02+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-23T22:05:06Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","impact":"high","summary":"WEINVEIW EBPro version 6.10.01.510_20251022 has a buffer overflow in its UtilityManagerEx.exe component. A remote attacker can exploit it to run arbitrary code.","category":"infrastructure","who_cares":["ebpro","windows","industrial-software"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Remote attacker runs arbitrary code on the affected Windows host","analyst_note":"Check vendor WEINVEIW advisories and the NVD entry for affected versions, patch version, and whether the UtilityManagerEx.exe listener is exposed by default.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["other-versions-unverified"],"user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000434,"input_tokens":2741,"output_tokens":320,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Check vendor WEINVEIW advisories and the NVD entry for affected versions, patch version, and whether the UtilityManagerEx.exe listener is exposed by default.","search":"'-10':57B '-120':37B '-16':58B '-2026':17A,20A '-26846':18A,21A '2025':54B '20251022':47B '2026':56B '6.10.01.510':46B '9.8':49B 'advisori':65B 'allow':10A,100C 'arbitrari':106C 'attack':13A,103C 'buffer':1A,34B,91C 'build':45B 'cna':51B 'co':6A,96C 'code':107C 'compon':111C 'confirm':90B 'cve':16A,19A 'cvss':48B 'cwe':36B 'dec':53B 'disclos':55B 'easybuild':43B 'easybuilder':23A 'ebpro':8A,22A,25B,98C 'engin':77B 'engineering-workst':76B 'execut':15A,105C 'exploit':71B 'exposur':81B 'hmi':26B 'industri':28B 'industrial-softwar':27B 'infer':88B 'infrastructur':30B 'known':70B 'like':74B 'limit':84B 'ltd':7A,97C 'network':87B 'ot':31B 'ot/engineering':86B 'overflow':2A,35B,92C 'per':50B 'poc':68B 'prismi':61B 'prismi-team':60B 'pro':24A,44B 'probabl':83B 'public':67B 'remot':12A,102C 'report':52B 'softwar':29B 'team':62B 'util':79B 'utilitymanagerex.exe':39B,72B,110C 'v.6.10.01.510_20251022':9A,99C 'vendor':64B 'via':108C 'vulner':3A,93C 'weintek':32B,42B 'weinveiw':5A,95C 'weinview':41B 'window':33B 'workstat':78B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-16T16:17:06+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-26846","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-26846","severity":null,"published_at":"2026-10-16T16:17:06+00:00","modified_at":"2026-10-21T02:17:07+00:00","first_seen_at":"2026-10-23T21:57:13+00:00","fetched_at":"2026-10-23T22:28:55+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-26846:462","url":null,"severity":null,"published_at":"2026-10-23T23:32:02+00:00","modified_at":"2026-10-23T23:32:02+00:00","first_seen_at":"2026-10-23T23:32:02+00:00","fetched_at":"2026-10-23T23:32:02+00:00","note":"No vendor advisory found; only the researcher disclosure (PRISMI-Team, no technical details/PoC) and CVE record. Vendor download page lists newer builds (EBPro V6.10.02.421_20260827, V6.10.01.667_20260827) but does not say they fix this. Listener exposure/default unknown."}],"documents":[{"id":2026,"url":"https://github.com/PRISMI-Team/VulnDisclos/blob/main/HMI/weintek_rce/weintek_rce.md","title":"PRISMI-Team disclosure: WEINVEIW EBPro CVE-2026-26846","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":2028,"url":"https://www.weinview.cn/rj","title":"Weinview EBPro software downloads (no security advisory)","kind":"vendor","source":"analyst","text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}