SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-69534

HIGH · CVSS 7.8 EPSS 0.62%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The Windows Program Compatibility Assistant Service is vulnerable to command injection, allowing an authorized attacker to execute arbitrary commands with elevated privileges on affected systems. This high-severity vulnerability poses a significant risk to system integrity and should be prioritized by organizations using Windows environments, particularly those with sensitive or critical applications. Immediate remediation measures are recommended to mitigate potential exploitation.

CVE
CVE-2026-69534
Severity
HIGH
CVSS
7.8
EPSS
0.62%
Windows

Original NVD Description

Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.