CVE-2026-28700

Awaiting Analysis Awaiting Analysis - Queue

Uncontrolled Search Path in EquiTriton

Publication date: 2026-08-11

Last updated on: 2026-08-12

Assigner: Intel Corporation

Description

Uncontrolled search path for some EquiTriton before version f5ddbb5 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-12

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2026-28700

EUVD

EUVD-2026-56523

Affected Vendors & Products

Vendor	Product	Version / Range
equitriton	equitrion	to f5ddbb5 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-427	The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Attack-Flow Graph

Executive Summary

This vulnerability in EquiTriton before version f5ddbb5 allows an escalation of privilege due to an uncontrolled search path. An unprivileged attacker with a privileged user account could exploit this with low complexity, requiring local access and passive user interaction. It may impact system confidentiality, integrity, and availability.

Detection Guidance

Detection methods are not specified in the provided CVE details. Check for unauthorized privilege escalation attempts or unusual system behavior in user applications. Monitor logs for suspicious activity related to EquiTriton components.

Impact Analysis

This vulnerability could allow an attacker to gain higher privileges on your system, potentially leading to unauthorized access or control. It may compromise system confidentiality, integrity, and availability, resulting in data breaches or system disruptions.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate GDPR or HIPAA requirements for data protection and confidentiality. Compliance could be impacted if sensitive data is exposed or altered due to the exploit.

Mitigation Strategies

Update EquiTriton to the latest version (f5ddbb5 or later) to address the uncontrolled search path issue. Restrict local access permissions and review user privileges to limit potential attack vectors. Monitor system integrity for unauthorized changes.

Hi! I’m here to help you understand CVE-2026-28700. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70