CVE-2026-8797

HIGH

NEC ExpressUpdate Agent for Windows Access Control Deficiency Leading to Arbitrary Code Execution

Generated titleSource: EIP title enrichment
STIX 2.1 vulnerability

Record summary

CVE-2026-8797 has a selected CVSS score of 8.5 (high).

Description

An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If a malicious user gains access to the product, arbitrary code could be executed with SYSTEM privileges.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 26, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

ExpressUpdate Agent for Windows

Browse NEC Corporation / ExpressUpdate Agent for Windows

Default status: unknown

CVE List3.24 and prioraffected

References

2