Back Ismalicious

CVE-2026-57895 Vulnerability — CVSS 7.8, HIGH Severity

Ismalicious • July 8, 2026

Incorrect default permissions issue exists in Pupsman versions prior to 3.9.0. An attacker can place a malicious executable in the installation folder, which results in arbitrary code execution with SYSTEM privilege

Active exploitation of CVE-2026-57895 has not been confirmed. The EPSS score is N/A%, indicating the estimated probability of exploitation in the 30 days.

CVE-2026-57895 has a CVSS v3 base score of 7.8 (HIGH severity), with vector string 3.0.

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Two High Severity Vulnerabilities Discovered in Pupsman Software On July 8, 2026, two critical vulnerabilities were disclosed in Pupsman versions prior to 3.9.0, both rated with a CVSS score of 7.8. CVE-2026-56437 involves an uncontrolled path element issue that allows arbitrary code execution with SYSTEM privileges when a crafted DLL is executed. CVE-2026-57895 pertains to incorrect default permissions, enabling attackers to place malicious executables in the installation folder, also leading to arbitrary code execution with SYSTEM privileges. Active exploitation of both vulnerabilities has not been confirmed, and the EPSS scores are N/A%, indicating no estimated probability of exploitation in the next 30 days. Users of Pupsman are urged to check for any indicators of compromise (IOCs) related to these vulnerabilities. Immediate action is recommended to mitigate potential risks. 2 sources 58

Extracted Entities

CVE-2026-57895 Vulnerability — CVSS 7.8, HIGH Severity

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)