CVE-2026-92253Disclosure

LOWCVSS 5.2 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attackers to cause a quarantined file to be written to an arbitrary filesystem location by creating a directory junction at the original file path and persuading an administrator to restore the file. This may enable modification of protected files or SYSTEM-level code execution through DLL hijacking.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-59

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-09-20); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-20: 1Mentions · 2026-11-01: 1Technical Details · 2026-09-20: 109-2011-01
Signal classification1 categories
Disclosure
1100.0%
Referenced assets2 URLs
Full discourse2 posts
  • Hugo | DevOps | Cybersecurity@HugoValters

    CVE-2026-92253 WatchDog AV 1.8.640: link resolution flaw in quarantine restore lets low-priv users plant files via directory junction, enabling SYSTEM code execution. CVSS 8.2, unpatched. Patch or restrict restore access now. #CVE #infosec https://www.valtersit.com/cve/CVE-2026-92253 #WatchDog #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker

    0002054
    1.1K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-92253 Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attackers to … https://www.cve.org/CVERecord?id=CVE-2026-92253

    Post summary

    The tweet discloses CVE-2026-92253, an improper link resolution flaw in WatchDog Anti-Virus 1.8.640 on Windows that allows local low-privileged attackers to ... No PoC, exploit, patch, or active exploitation is mentioned.

    000001.6K
    58.1K followersView on X

Explore more