CVE-2026-25191

Severity: high (CVSS 8.4 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-02-26 · updated 2026-06-17
Weakness: CWE-427

Description

The installer of FinalCode Client provided by Digital Arts Inc. contains an issue with the DLL search path. If a user is directed to place a malicious DLL file and the installer to the same directory and execute the installer, arbitrary code may be executed with the installer's execution privilege.

Affected products

Digital Arts Inc. FinalCode Ver.5 series: before 5.43R01
Digital Arts Inc. FinalCode Ver.6 series: before 6.51R01

References

https://jvn.jp/en/jp/JVN48498976/
https://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl&filename=information_20260226_01.pdf

Get alerted when CVE-2026-25191 or the next vulnerability affects your stack