EIP-2026-117928

This is a writeup describing an unquoted service path vulnerability in SolarWinds Kiwi Syslog Server 9.6.7.1. The vulnerability could allow local privilege escalation if an attacker can place an executable in a path with spaces that is executed due to improper quoting.