What’s Vulnerable › Vulnerabilities

CVE-2026-56437

• Severity: high (CVSS 8.4 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-08 · updated 2026-10-25
• Weakness: CWE-427

Description

Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the same folder as the affected installer and the installer is executed, arbitrary code may be executed with SYSTEM privilege.

Affected products

• Fuji Electric Co.,Ltd. Pupsman: before 3.9.0

References

• https://jvn.jp/en/jp/JVN62347140/
• https://www.fujielectric.co.jp/products/power_supply/ups/product_detail/software_pupsman.html

Get alerted when CVE-2026-56437 or the next vulnerability affects your stack