Vulnerability Description
A security issue exists within ControlFLASH™, where the installer grants write permissions to the "Everyone" group on a product installation directory. This could allow arbitrary code execution, resulting in an attacker being given the ability to run any commands or code of the attacker's choice on a target machine at the logged-in user's permission level.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-12663?
CVE-2026-12663 is a documented vulnerability. A security issue exists within ControlFLASH™, where the installer grants write permissions to the "Everyone" group on a product installation directory. This could allow arbitrary code execution, resul...
How severe is CVE-2026-12663?
CVSS scoring is not yet available for CVE-2026-12663. Check NVD for updates.
Is there a patch for CVE-2026-12663?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.