8.5
High
CVE-2026-8797 An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows
Description
An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If a malicious user gains access to the product, arbitrary code could be executed with SYSTEM privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ExpressUpdate Agent for Windows | Versions not published |