What is CVE-2026-57919?

CVE-2026-57919 is a high-severity vulnerability in N/a, classified under Incorrect Default Permissions. CVSS score: 7.8/10. Published 2026-06-29.

How severe is CVE-2026-57919?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in N/a

CVE-2026-57919

PBackupVSS.exe in Matrix42 Empirum before 25.5 and 26.x before 26.2 creates a named pipe (\\.\pipe\PBackupVSS) with a DACL that grants GENERIC_READ and GENERIC_WRITE permissions to all authenticated users. A low-privileged local attacker can connect to this pipe and send crafted IPC messages to trigger execution of arbitrary commands with SYSTEM privileges via an untrusted search path. This allows privilege escalation by placing a malicious shadow.exe in a controlled working directory.

EPSS: 0.001 (3.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

N/a — versions n/a

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-57919?: CVE-2026-57919 is a high-severity vulnerability in N/a, classified under Incorrect Default Permissions. CVSS score: 7.8/10. Published 2026-06-29.
How severe is CVE-2026-57919?: High severity. CVSS v3 base score is 7.8 out of 10.