CVE WatchNov 5, 2026

CVE-2025-57227

An unquoted service path in Kingosoft Technology Ltd Kingo ROOT v1.5.8.3353 allows attackers to escalate privileges via placing a crafted ex

CVSS

7.8

High

EPSS

0.1%

KEV

—

Exploit Today

0-100

Published: Oct 29, 2025 · Last modified: Nov 5, 2026 · CWE-428

EPSS · 30d

0.1%EPSS · 30 days0.1%

2026-10-132026-11-10

Technical description

An unquoted service path in Kingosoft Technology Ltd Kingo ROOT v1.5.8.3353 allows attackers to escalate privileges via placing a crafted executable file into a parent folder.

Official references

www.exploit-db.comhttps://www.exploit-db.com/exploits/51707

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-821557.8 HIG

32.1%

——10Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Command execution.4d CVE-2026-978606.7 MED

8.9%

——3YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges.12d CVE-2026-153587.5 HIG

65.8%

——20ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability.48d CVE-2026-814697.8 HIG

8.8%

——3Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of Privileges47d CVE-2026-572237.0 HIG

4.5%

——1Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the Windows service installation and parameter-update logic in src/win32-service.c can pass an unquoted service ImagePath to CreateServiceA. When Suricata is installed below a path containing spaces and an earlier path component is writable by a local low-privileged attacker, Windows can execute an attacker-controlled program as LocalSystem, resulting in local privilege escalation. This issue is fixed in versions 8.0.6 and 7.0.17.43d CVE-2026-778277.1 HIG

5.3%

——2Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\ProgramData\Maono'. Fixed in 4.0.80.57d