CVE-2026-76148
Received Received - Intake

Code Injection Vulnerability in CorvusSKK Leading to Arbitrary Code Execution

Vulnerability report for CVE-2026-76148, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: JPCERT/CC

Description

CorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on the affected product.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CorvusSKK has a code injection vulnerability that allows attackers to inject malicious code into the system. This could lead to arbitrary code execution, meaning an attacker could run unauthorized commands on the affected product.

Impact Analysis

If exploited, this vulnerability could allow attackers to take control of your system, steal data, install malware, or perform other malicious actions. It poses a high risk to confidentiality, integrity, and availability of the affected system.

Compliance Impact

This vulnerability could lead to data breaches, which may violate GDPR and HIPAA requirements for data protection and security. Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Update CorvusSKK to the latest version to patch the code injection vulnerability. Disable unnecessary services or features that may be exposed to this issue. Monitor system logs for unusual activity or unauthorized code execution attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76148. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart