CVE-2026-30266Disclosure(deepcool / deepcreative)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch deepcool deepcreative systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.12 and before allows a local attacker to execute arbitrary code via a crafted file

deepcool CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://github.com/uncle-hash/vulnerability-research/tree/main/CVE-2026-30266

Weakness type (CWE)

CWE-277

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

deepcreative

Threat summary

Patch or workaround signal is available
4 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 4 signals
Disclosure: 2 classified signals
General: 1 classified signal
Peaked 1d ago at 2 mentions (2026-04-21); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

deepcool

Products

deepcreative

Deep dive

Activity timeline4 mentions / 3d

Signal classification3 categories

Disclosure

250.0%

General

125.0%

Patch

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-20	1	Disclosure1
2026-04-21	2	Disclosure1General1
2026-04-22	1	Patch1

Full discourse4 posts

Giuseppe Paternicola@giuseppe_1337170d
Patch
🚨 HIGH SEVERITY: CVE-2026-30266 (CVSS 7.8) DeepCool DeepCreative ≤v1.2.7 vulnerable to local privilege escalation via insecure permissions. Attackers can execute arbitrary code through crafted files. Update immediately. #CVE #Vulnerability #PatchNow https://t.co/ao0qLBmBki
Post summary
The tweet alerts to a high‑severity local privilege escalation flaw (CVE‑2026‑30266) in DeepCool DeepCreative, urging users to apply updates immediately, though it offers no exploit or deep technical analysis.
0000043
26 followersView on X
Infoflowcloud@infoflowcloud170d
Disclosure
🚨*CVE* CVE-2026-30266 Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.7 and before allows a local attacker to execute arbitrary code via a crafted file https://www.cve.org/CVERecord?id=CVE-2026-30266 ----- Traducción: CVE-2026-30266 Vulnerabilidad de permis… http://infoflow.cloud`
Post summary
The text announces CVE-2026-30266, noting insecure file permissions in DeepCool DeepCreative 1.2.7 and earlier that can enable local code execution, but provides no PoC, exploit, or patch details.
0000020
72 followersView on X
CVE@CVEnew170d
General
CVE-2026-30266 Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.7 and before allows a local attacker to execute arbitrary code via a crafted file https://www.cve.org/CVERecord?id=CVE-2026-30266
Post summary
CVE-2026-30266 is a local arbitrary code execution vulnerability in DeepCool DeepCreative v1.2.7 and earlier; no PoC, exploit, or patch information is provided.
00000113
57.2K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds171d
Disclosure
CVE-2026-30266 Arbitrary Code Execution via Insecure Permissions in DeepCool DeepCreati... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30266 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The tweet announces CVE‑2026‑30266, describes it as an arbitrary code execution flaw due to insecure permissions, and links to a vulnerability details page and alerts.
0000040
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	deepcool	deepcreative	-	-	-

Explore more

Back to dashboard deepcool CVEs deepcreative vulnerabilities

What researchers are saying

CVE-2026-30266

Giuseppe Paternicola[verified]@giuseppe_1337Patch

The tweet alerts to a high‑severity local privilege escalation flaw (CVE‑2026‑30266) in DeepCool DeepCreative, urging users to apply updates immediately, though it offers no exploit or deep technical analysis.

Infoflowcloud@infoflowcloudDisclosure

The text announces CVE-2026-30266, noting insecure file permissions in DeepCool DeepCreative 1.2.7 and earlier that can enable local code execution, but provides no PoC, exploit, or patch details.

CVE@CVEnewGeneral

CVE-2026-30266 is a local arbitrary code execution vulnerability in DeepCool DeepCreative v1.2.7 and earlier; no PoC, exploit, or patch information is provided.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The tweet announces CVE‑2026‑30266, describes it as an arbitrary code execution flaw due to insecure permissions, and links to a vulnerability details page and alerts.