CVE-2016-20092Disclosure

LOWCVSS 8.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

NetDrive 2.6.12 contains an unquoted service path vulnerability in the Netdrive2_Service_Netdrive2 service that allows local users to execute arbitrary code with SYSTEM privileges. Attackers can insert malicious executables in the system root path that will be executed during service startup or system reboot, resulting in privilege escalation.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-428

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-06-22: 2Technical Details · 2026-06-22: 206-22
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2016-20092 NetDrive 2.6.12 contains an unquoted service path vulnerability in the Netdrive2_Service_Netdrive2 service that allows local users to execute arbitrary code with SYST… https://www.cve.org/CVERecord?id=CVE-2016-20092

    Post summary

    The tweet notes CVE‑2016‑20092 as an unquoted service path vulnerability that permits local code execution, but it does not include a PoC, exploit, patch, or evidence of active exploitation.

    000201.1K
    58.0K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2016-20092 NetDrive 2.6.12 contains an unquoted service path vulnerability in the Netdrive2_Service_Netdrive2 service that allows local users to execute arbitrary code with SYST… https://www.cve.org/CVERecord?id=CVE-2016-20092 ----- Traducción: CVE-2016-20092 Net… http://infoflow.cloud`

    Post summary

    The post announces CVE-2016-20092, detailing an unquoted service path flaw in NetDrive 2.6.12 that permits local code execution.

    0000036
    88 followersView on X

Explore more