EIP-2026-117805

This is a writeup describing an unquoted service path vulnerability in QNAP NetBak Replicator 4.5.6.0607. The vulnerability allows local users to execute arbitrary code with elevated privileges by exploiting the 'QVssService' service path.