CVE-2026-81302Disclosure

LOWCVSS 8.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a local attacker to execute arbitrary code with SYSTEM privileges on the affected product.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-276

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-09-02); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-02: 1Mentions · 2026-09-04: 1Patch / Workaround · 2026-09-02: 1Technical Details · 2026-09-02: 1Technical Details · 2026-09-04: 109-0209-04
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • 日本サイバーセキュリティ株式会社@jp_cb_security
    Disclosure

    PALLET CONTROL / PalletControl にアクセス制御不備。プログラム間通信の不備で一般ユーザからSYSTEM権限の任意コード実行の可能性があります。Ver.6.3パッチ5以前、PalletControl 10 Update 8以前が対象。利用中ならバージョン確認と更新可否をご検討ください。JVN#84094853 / CVE-2026-81302 https://jvn.jp/jp/JVN84094853/

    Post summary

    The post announces an access‑control vulnerability in PalletControl that permits arbitrary code execution with SYSTEM rights, specifies affected versions, and recommends checking for and applying updates.

    0001058
    10 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-81302 PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a local attacker to execute arbitrary code with SYSTEM privileges on th… https://www.cve.org/CVERecord?id=CVE-2026-81302

    Post summary

    The entry announces CVE-2026-81302 as a privilege‑escalation vulnerability that allows local code execution with SYSTEM rights, but provides no PoC, exploit, or patch details.

    00000915
    58.1K followersView on X

Explore more