RATOC Systems, Inc. vulnerabilities
Published CVEs affecting RATOC Systems, Inc. products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-32680
High · 7.8
CWE-276 Mar 26, 2026
Incorrect Default Permissions in RATOC Systems, Inc. RATOC RAID Monitoring Manager for Windows
The installer of RATOC RAID Monitoring Manager for Windows allows to customize the installation folder. If the installation folder is customized to some non-default one, the folder may be left with un-secure ACLs and non-administrative users can alter contents of that folder. It may allow a non-administrative user to execute an arbitrary code with SYSTEM privilege.
CVE-2026-28760
High · 7.8
CWE-427 Mar 26, 2026
Uncontrolled Search Path Element in RATOC Systems, Inc. RATOC RAID Monitoring Manager for Windows
The installer of RATOC RAID Monitoring Manager for Windows searches the current directory to load certain DLLs. If a user is directed to place a crafted DLL with the installer, an arbitrary code may be executed with the administrator privilege.