CVE-2021-47762

HIGH

HTTPDebuggerPro 9.11 - Code Injection

Title source: llm

Description

HTTPDebuggerPro 9.11 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the service configuration to inject malicious executables and gain elevated access to the system.

Exploits (1)

exploitdb WRITEUP
by Aryan Chehreghani · textlocalwindows
https://www.exploit-db.com/exploits/50545

Scores

CVSS v3 7.8
EPSS 0.0002
EPSS Percentile 5.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-428
Status published
Products (1)
Httpdebugger/HTTPDebuggerPro 9.11
Published Jan 15, 2026
Tracked Since Feb 18, 2026