Vulnerability in Civetweb

CVE-2026-5789

Vulnerability related to an unquoted search path in CivetWeb v1.16. This vulnerability allows a local attacker to execute arbitrary code with elevated privileges by placing a malicious executable in a directory that is scanned before the i…

EPSS: 0.000 (4.2th percentile) — read the EPSS interpretation.