Report: CVE-2026-9489 - NitroSense V3: Local Privilege Escalation (LPE) vulnerability

Report: CVE-2026-9489 - NitroSense V3: Local Privilege Escalation (LPE) vulnerability

CVE ID :CVE-2026-9489 Published : May 25, 2026, 1:50 a.m. | 1 hour, 41 minutes ago Description :NitroSense 3.x before 3.01.3052 contains Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions. However, this Named Pipe is misconfigured, allowing any authenticated local user to execute arbitrary code with NT AUTHORITY\SYSTEM privileges and to delete arbitrary files with SYSTEM privileges. By leveraging this, an attacker can execute arbitrary code on the target system with elevated privileges. Severity: 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
May 25, 2026
Affected Product: Windows
Attack Vector: Local
Impact: Privilege Escalation