CVE-2020-36927 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

DiskPulse Enterprise 13.6.14 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially exe…
High CVSS: 8.5

CVE-2020-36927

DiskPulse Enterprise 13.6.14 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Disk Pulse Enterprise\bin\diskpls.exe' to inject malicious executables and escalate privileges.
Vendor
Flexense
Product
Diskpulse
CWE
CWE-428
Yayın Tarihi
2026-01-16 00:16:19
Güncelleme
2026-02-09 15:07:34
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-428 Diskpulse HIGH Flexense 2026

Referanslar

https://www.diskpulse.com https://www.exploit-db.com/exploits/50012 https://www.vulncheck.com/advisories/diskpulse-unquoted-service-path https://www.exploit-db.com/exploits/50012