eMPIA Technology vulnerabilities
Published CVEs affecting eMPIA Technology products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-7280
Medium · 6.7
CWE-428 Apr 28, 2026
eMPIA Technology｜AVACAST - Unquoted Service Path
AVACAST developed by eMPIA Technology has a Unquoted Service Path vulnerability, allowing privileged local attackers to place a malicious executable file in a specific directory, resulting in arbitrary code execution with system privileges when the AVACAST service starts.
CVE-2026-7279
High · 7.8
CWE-427 Apr 28, 2026
eMPIA Technology｜AVACAST - DLL Hijacking
AVACAST developed by eMPIA Technology, has a DLL Hijacking vulnerability, allowing authenticated local attackers to place a malicious DLL in a specific directory, resulting in arbitrary code execution with system privileges when the system loads the DLL.