Improper Access Control in CatchPulse Named Pipe Interface

Executive Summary

CVE-2026-55979 is an improper access control vulnerability in CatchPulse, an endpoint security solution for Windows devices. It exists in the named pipe communication interface, allowing an attacker to invoke certain functions of the software. The impact is limited to operations that enforce stricter security policies.

Useful 0 Not Useful 0

Detection Guidance

Detecting this vulnerability requires checking for outdated versions of CatchPulse. Verify the installed version using commands like 'wmic product get name,version' or 'Get-WmiObject -Class Win32_Product' on Windows systems. Compare the version against 10.10.1 or later.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this vulnerability to invoke CatchPulse functions, potentially bypassing security controls. However, the impact is restricted to operations with stricter security policies, reducing the overall risk.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability's impact on compliance with standards like GDPR or HIPAA is not explicitly detailed in the provided context. The flaw allows limited unauthorized function invocation but does not directly indicate data exposure or policy violations that would typically trigger regulatory breaches.

Useful 0 Not Useful 0

Mitigation Strategies

Update CatchPulse to version 10.10.1 or later to resolve the improper access control flaw in the named pipe interface.

Useful 0 Not Useful 0