VulnSocial

CVE-2026-5789Disclosure(civetweb_project / civetweb)

LOWCVSS 7.8 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Vulnerability related to an unquoted search path in CivetWeb v1.16. This vulnerability allows a local attacker to execute arbitrary code with elevated privileges by placing a malicious executable in a directory that is scanned before the intended application path (C:\Program Files\CivetWeb\CivetWeb.exe --), due to the absence of quotes in the service configuration.

civetweb_project CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-428

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • civetweb

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • 3 total mentions across 1 day

Affected systems

Vendors
civetweb_project
Products
civetweb

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-04-21: 3Technical Details · 2026-04-21: 204-21
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-5789 Vulnerability related to an unquoted search path in CivetWeb v1.16. This vulnerability allows a local attacker to execute arbitrary code with elevated privileges by pla… https://www.cve.org/CVERecord?id=CVE-2026-5789

    Post summary

    The text announces CVE-2026-5789, describing its technical details—an unquoted search path flaw in CivetWeb v1.16 that lets local attackers execute code with elevated privileges—but provides no PoC, exploit code, or evidence of active exploitation.

    00010144
    57.2K followersView on X
  • INCIBE-CERT@incibe_cert
    General

    ⚠️#INCIBEaviso | Ruta de búsqueda sin comillas en #CivetWeb #CVE CVE-2026-5789 https://www.incibe.es/incibe-cert/alerta-temprana/avisos/ruta-de-busqueda-sin-comillas-en-civetweb #AvisosDeSeguridad #TI #CNA #0day

    Post summary

    The tweet announces a potential zero-day vulnerability (CVE-2026-5789) affecting CivetWeb, but provides limited information and no evidence of exploitation, PoC, or mitigation.

    01000356
    42.7K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-5789 Vulnerability related to an unquoted search path in CivetWeb v1.16. This vulnerability allows a local attacker to execute arbitrary code with elevated privileges by pla… https://www.cve.org/CVERecord?id=CVE-2026-5789 ----- Traducción: CVE-2026-5789 Vul… http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-5789, a local privilege escalation via an unquoted search path in CivetWeb 1.16, but offers no PoC, exploit code, active exploitation claims, or patch information.

    0000020
    72 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appcivetweb_projectcivetweb1.16--

Explore more

Back to dashboardcivetweb_project CVEscivetweb vulnerabilities