Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Iskysoft Application Framework Service 2.4.3.241 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious executables that would be run with the service's high-level system permissions.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-01 | 1 | Disclosure1 |
| 2026-02-05 | 1 | General1 |
CVE-2020-37048 Iskysoft Application Framework Service 2.4.3.241 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with el… https://www.cve.org/CVERecord?id=CVE-2020-37048
Post summary
The post announces a local code‑execution vulnerability in Iskysoft Application Framework Service 2.4.3.241 via an unquoted service path, but provides no PoC, patch, or evidence of exploitation.
CVE-2020-37048 (CVSS:8.5, HIGH) is Awaiting Analysis. Iskysoft Application Framework Service 2.4.3.241 contains an unquoted service path vulnerability that allows local users..https://nvd.nist.gov/vuln/detail/CVE-2020-37048 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The tweet announces CVE‑2020‑37048, noting its CVSS score and that it is an unquoted service path issue in Iskysoft Application Framework Service, but provides no evidence of exploitation or a patch.