Vembu vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Vembu products: 1 record(s), with severity, exploitation and fixes.

Vembu StoreGrid 1

Exploited only (KEV) →

CVE-2016-20086 High · 7.8 CWE-428 Jun 19, 2026

Vembu StoreGrid 4.0 Unquoted Service Path Privilege Escalation

Vembu StoreGrid 4.0 contains an unquoted service path vulnerability in the RemoteBackup and RemoteBackup_webServer services that allows local attackers to escalate privileges. Attackers can place a malicious executable in the unquoted path and restart the service to execute code with LocalSystem privileges.