EIP-2026-117283

PRE-CVE

HP TouchSmart Calendar 4.1.4245 - Insecure File Permissions Privilege Escalation

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-117283. PoCs published by hyp3rlinx.

AI-analyzed exploit summary This advisory details a privilege escalation vulnerability in HP TouchSmart Calendar Service due to weak file permissions, allowing low-privileged users to replace or modify executable files to run arbitrary code in the context of elevated privileges.

Description

HP TouchSmart Calendar 4.1.4245 - Insecure File Permissions Privilege Escalation

Exploits (1)

exploitdb WRITEUP
by hyp3rlinx · textlocalwindows
https://www.exploit-db.com/exploits/40636

This advisory details a privilege escalation vulnerability in HP TouchSmart Calendar Service due to weak file permissions, allowing low-privileged users to replace or modify executable files to run arbitrary code in the context of elevated privileges.

Classification
Writeup 100%
Attack Type
Lpe
Complexity
Trivial
Reliability
Reliable
Target: Hewlett Packard TouchSmart Calendar Service (File version 4.1.4245)
No auth needed
Prerequisites: Local access to the system · HP TouchSmart Calendar Service installed
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026