GCVE-110-NCSC-2026-333

Advisory PublishedCVSS 7.7/10

Vulnetix · Advisory published August 28, 2026

CodeMeter Runtime versions 8.40 to before 8.41a and 9.00 to before 9.10 contain a vulnerability involving predictable temporary files and improper NTFS reparse point checks, enabling local attackers to delete files with System privileges and escalate privileges.

Download JSON Open in Console

Weaknesses (CWE)

CWE-59Improper Link Resolution Before File Access ('Link Following')CWE-134Use of Externally-Controlled Format StringCWE-130Improper Handling of Length Parameter InconsistencyCWE-639Authorization Bypass Through User-Controlled Key

Risk Scores

CVSS 3.1

7.7/10

High · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected Products

Vendor	Product	Versions	Platforms
Wibu Systems	vers:unknown/*	—	—

Aliases

CVE-2026-81572 CVE-2026-81573 CVE-2026-81574 CVE-2026-81575 CVE-2026-81576

References

advisory

Browse GCVE Records

867 records in the GCVE database · Updated September 2, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON