CVE-2026-2998

HIGH

eAI Technologies ERP - DLL Hijacking

Title source: llm

Description

ERP developed by eAI Technologies has a DLL Hijacking vulnerability, allowing authenticated local attackers to place a crafted DLL file in the same directory as the program, thereby executing arbitrary code.

Scores

CVSS v3 7.8
EPSS 0.0001
EPSS Percentile 2.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-426
Status draft

Timeline

Published Feb 23, 2026
Tracked Since Feb 23, 2026