CVE-2026-95648 · Other
NO FIX YET · SEE WHAT TO DO
C-Prot AppDefense, a security product from C-Prot Inc., contains an improper control of dynamically determined object attributes. An attacker who can reach the product can escalate privileges on the affected system.
first public Nov 9, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Organizations running C-Prot AppDefense before version 1.0.2729 are affected. The sources do not describe the exact configuration or deployment needed to trigger the flaw, so the required access level is unknown.
Not affected if version-1.0.2729-or-later
Who cares appdefense, c-prot, windows
1.0.27291.0.2729 or laterImproperly controlled modification of Dynamically-Determined object attributes vulnerability in C-Prot Inc. C-Prot AppDefense allows Privilege Escalation.
This issue affects C-Prot AppDefense: before 1.0.2729.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.