eMPIA Technology AVACAST vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting eMPIA Technology AVACAST: 2 record(s), with affected versions and fixes.
CVE-2026-7280
Medium · 6.7
CWE-428 Apr 28, 2026
eMPIA Technology｜AVACAST - Unquoted Service Path
AVACAST developed by eMPIA Technology has a Unquoted Service Path vulnerability, allowing privileged local attackers to place a malicious executable file in a specific directory, resulting in arbitrary code execution with system privileges when the AVACAST service starts.
CVE-2026-7279
High · 7.8
CWE-427 Apr 28, 2026
eMPIA Technology｜AVACAST - DLL Hijacking
AVACAST developed by eMPIA Technology, has a DLL Hijacking vulnerability, allowing authenticated local attackers to place a malicious DLL in a specific directory, resulting in arbitrary code execution with system privileges when the system loads the DLL.