Vulnerability Description
Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISyncService contract.
References
- https://medium.com/@alisaifeldin/cve-2026-116596-local-privilege-escalation-in-p
- https://pyrus.com/en/pyrus-sync
FAQ
What is CVE-2026-116596?
CVE-2026-116596 is a documented vulnerability. Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged a...
How severe is CVE-2026-116596?
CVSS scoring is not yet available for CVE-2026-116596. Check NVD for updates.
Is there a patch for CVE-2026-116596?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.