What is CVE-2026-7832?

CVE-2026-7832 is a high-severity vulnerability in Iobit Advanced Systemcare, classified under Improper Link Resolution Before File Access. CVSS score: 7.0/10. Published 2026-05-05.

How severe is CVE-2026-7832?

High severity. CVSS v3 base score is 7.0 out of 10.

Vulnerability in Iobit Advanced Systemcare

CVE-2026-7832

A security flaw has been discovered in IObit Advanced SystemCare 19. This affects an unknown part of the file ASC.exe of the component Service. The manipulation results in symlink following. Attacking locally is a requirement. This attack…

EPSS: 0.000 (3.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.0 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Iobit Advanced Systemcare — versions 19

Weakness classification (CWE)

References

cna@vuldb.com (exploit, patch)
Submit #797630 | IObit Advanced SystemCare 19 Link Following (third-party-advisory)
VDB-361111 | IObit Advanced SystemCare Service ASC.exe symlink (vdb-entry)
VDB-361111 | CTI Indicators (IOB, IOC, IOA) (signature, permissions-required)

Frequently asked questions

What is CVE-2026-7832?: CVE-2026-7832 is a high-severity vulnerability in Iobit Advanced Systemcare, classified under Improper Link Resolution Before File Access. CVSS score: 7.0/10. Published 2026-05-05.
How severe is CVE-2026-7832?: High severity. CVSS v3 base score is 7.0 out of 10.