CVE-2026-14985

HIGH

Analog WAY Picturall Quad Compact Mark II < 3.5.9 - Privilege Escalation

Title source: rule

Description

The Analog Way Picturall Quad Compact Mark II version 3.5.8, contains a local privilege escalation vulnerability in the core firmware. This is due to improper privilege delegation and insufficient input validation in a maintenance script.

References (1)

Core 1

Core References

https://www.kb.cert.org/vuls/id/360868

Scores

CVSS v3 7.8

EPSS 0.0017

EPSS Percentile 7.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-22 CWE-250

Status published

Products (1)

Analog Way/Picturall Quad Compact Mark II 3.5.8 - 3.5.9

Published Jul 22, 2026

Tracked Since Jul 22, 2026