CVE Watch26 de out. de 2026

CVE-2026-116596

Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService

CVSS

—

Sem CVSS

EPSS

0.1%

KEV

—

Exploit Today

0-100

Publicado: 26 de out. de 2026 · Última mod.: 26 de out. de 2026

EPSS · 30d

0.1%EPSS · 30 dias0.1%

2026-10-272026-11-07

Descrição técnica

Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISyncService contract.

Referências oficiais

medium.comhttps://medium.com/@alisaifeldin/cve-2026-116596-local-privilege-escalation-in-pyrus-sync-for-windows-0fe2417dc8cf
pyrus.comhttps://pyrus.com/en/pyrus-sync

CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.