---
id: "CVE-2026-26846"
kind: "vulnerability"
aliases: ["CVE-2026-26846"]
title: "Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute\u2026"
severity: "critical"
cvss: 9.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "EBPro (EasyBuilder Pro)", "fixed": [], "affected": "6.10.01.510_20251022", "ecosystem": "vendor"}]
ecosystems: []
tags: ["ebpro", "hmi", "industrial-software", "infrastructure", "ot", "weintek", "windows"]
not_affected_if: ["no-network-exposure", "other-versions-unverified"]
published_at: "2026-10-16T16:17:06+00:00"
first_seen_at: "2026-10-23T21:57:13+00:00"
updated_at: "2026-10-23T23:32:02+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26846", "first_seen_at": "2026-10-23T21:57:13+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-10-23T23:32:02+00:00"}]
---

# Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute…

Buffer overflow (CWE-120) in UtilityManagerEx.exe of Weinview (Weintek) EasyBuilder Pro build 6.10.01.510_20251022, CVSS 9.8 per CNA. Reported Dec 2025, disclosed 2026-10-16 by PRISMI-Team. No vendor advisory, no public PoC, no known exploitation. UtilityManagerEx.exe is likely an engineering-workstation utility, so exposure is probably limited to OT/engineering networks (inference, not confirmed).

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:EBPro (EasyBuilder Pro) affected 6.10.01.510_20251022 fixed ?

## How to check

Check the installed EBPro version (Help > About in EasyBuilder Pro, or the install folder). Build 6.10.01.510_20251022 is the only confirmed affected build; other builds are unverified. Check whether UtilityManagerEx.exe is running or listening (netstat -ano, tasklist) and keep it off untrusted networks.

## Fix

No vendor-confirmed fix. Weinview lists newer builds (EBPro V6.10.02.421_20260827, V6.10.01.667_20260827); their release notes do not mention this CVE, so confirm with Weinview before relying on them. Meanwhile, firewall engineering workstations from untrusted networks.

## Timeline

- 2026-10-23T21:57:13+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-26846
- 2026-10-23T23:32:02+00:00 analyst — No vendor advisory found; only the researcher disclosure (PRISMI-Team, no technical details/PoC) and CVE record. Vendor download page lists newer builds (EBPro V6.10.02.421_20260827, V6.10.01.667_20260827) but does not say they fix this. Listener exposure/default unknown.

## Documents

- [advisory] PRISMI-Team disclosure: WEINVEIW EBPro CVE-2026-26846 https://github.com/PRISMI-Team/VulnDisclos/blob/main/HMI/weintek_rce/weintek_rce.md
- [mentions] Weinview EBPro software downloads (no security advisory) https://www.weinview.cn/rj

## From the sources

Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute arbitrary code via the UtilityManagerEx.exe component

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_