EIP-2026-118028
PRE-CVETrend Micro OfficeScan Client 10.0 - ACL Service LPE
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-118028. PoCs published by msd0pe.
AI-analyzed exploit summary This exploit leverages incorrect ACL permissions on the Trend Micro OfficeScan Client directory to replace legitimate service executables with malicious ones, achieving local privilege escalation to SYSTEM. The PoC provides clear steps for generating a reverse shell, replacing the service binary, and restarting the service to trigger execution.
Description
Trend Micro OfficeScan Client 10.0 - ACL Service LPE
Exploits (1)
This exploit leverages incorrect ACL permissions on the Trend Micro OfficeScan Client directory to replace legitimate service executables with malicious ones, achieving local privilege escalation to SYSTEM. The PoC provides clear steps for generating a reverse shell, replacing the service binary, and restarting the service to trigger execution.