CVE-2026-42936Disclosure

LOWCVSS 8.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privilege of the user invoking the installer.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://jvn.jp/en/jp/JVN59875262/

Weakness type (CWE)

CWE-427

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
4 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 4 signals
Disclosure: 3 classified signals
Peaked 1d ago at 3 mentions (2026-07-15); latest day: 1
4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d

Signal classification2 categories

Disclosure

375.0%

Patch

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-15	3	Disclosure3
2026-07-18	1	Patch1

Full discourse4 posts

connect24h@connect24h88d
Patch
これは証券口座を扱う端末で踏みたくない。証券口座、出金面倒だから悪用難しいのに狙われるんですよね。 HYPER SBI 2 ver.3.20.0未満のインストーラにDLL search order hijacking（CVE-2026-42936、CVSS 4.0: 8.4）。同じディレクトリに細工したDLLがある状態で実行すると、その権限で任意コードを実行される可能性がある。現場で怖いのは、更新済みの本体だけ見て「対応済み」とすること。Downloads、共有フォルダ、ソフト配布基盤に残る旧インストーラを棚卸しし、削除または隔離。再導入はver.3.20.0以降に統一する。EDRでは旧インストーラの実行履歴、同一フォルダからのDLL load、子process生成を確認してほしい。個人利用者もPC内の旧インストーラを捨てる。CSIRT初動メモとして保存推奨。 #セキュリティ
Post summary
The post warns that older Hyper SBI 2 installers (pre‑3.20.0) are vulnerable to a DLL search order hijacking (CVE‑2026‑42936). It advises applying the 3.20.0+ patch or removing old installers, with no evidence of exploitation or PoC.
10000440
4.5K followersView on X
CVE@CVEnew91d
Disclosure
CVE-2026-42936 The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary … https://www.cve.org/CVERecord?id=CVE-2026-42936
Post summary
The notice identifies CVE‑2026‑42936 as an insecure DLL loader in HYPER SBI 2 that could allow arbitrary code execution, but provides no PoC, exploit code, patch, or evidence of active exploitation.
00010618
57.8K followersView on X
Infoflowcloud@infoflowcloud91d
Disclosure
🚨*CVE* CVE-2026-42936 The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary … https://www.cve.org/CVERecord?id=CVE-2026-42936 ----- Traducción: CVE-2026-42936 El … http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑42936, describing a DLL hijacking flaw in the HYPER SBI 2 installer that could allow arbitrary code execution.
0000058
92 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds91d
Disclosure
CVE-2026-42936 Arbitrary Code Execution in HYPER SBI 2 Installer via Insecure DL... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42936 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The post announces CVE-2026-42936, an arbitrary code execution flaw in HYPER SBI 2 installer via insecure download, but does not provide evidence of PoC, exploitation, patch, or mitigations.
00000131
4.1K followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-42936

connect24h[verified]@connect24hPatch

The post warns that older Hyper SBI 2 installers (pre‑3.20.0) are vulnerable to a DLL search order hijacking (CVE‑2026‑42936). It advises applying the 3.20.0+ patch or removing old installers, with no evidence of exploitation or PoC.

CVE@CVEnewDisclosure

The notice identifies CVE‑2026‑42936 as an insecure DLL loader in HYPER SBI 2 that could allow arbitrary code execution, but provides no PoC, exploit code, patch, or evidence of active exploitation.

Infoflowcloud@infoflowcloudDisclosure

The post announces CVE‑2026‑42936, describing a DLL hijacking flaw in the HYPER SBI 2 installer that could allow arbitrary code execution.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The post announces CVE-2026-42936, an arbitrary code execution flaw in HYPER SBI 2 installer via insecure download, but does not provide evidence of PoC, exploitation, patch, or mitigations.