CVE-2026-92253
Received Received - Intake

Improper Link Resolution in WatchDog Anti-Virus Quarantine

Publication date: 2026-09-20

Last updated on: 2026-09-20

Assigner: 34edf4f2-2577-40ab-82ce-39f45972c129

Description
Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attackers to cause a quarantined file to be written to an arbitrary filesystem location by creating a directory junction at the original file path and persuading an administrator to restore the file. This may enable modification of protected files or SYSTEM-level code execution through DLL hijacking.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-20
Last Modified
2026-09-20
Generated
2026-09-20
AI Q&A
2026-09-20
EPSS Evaluated
N/A
NVD
CVE-2026-92253
EUVD
EUVD-2026-83741

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
watchdog anti-virus 1.8.640

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-59 The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves improper link resolution during the quarantine restoration process in WatchDog Anti-Virus 1.8.640 on Windows. A local attacker with low privileges can exploit this by creating a directory junction at the original file path of a quarantined file. When an administrator restores the file, it can be written to an arbitrary filesystem location, potentially allowing modification of protected files or SYSTEM-level code execution through DLL hijacking.

Detection Guidance

To detect this vulnerability, monitor for unauthorized file restorations to unexpected locations, especially by administrators. Check for suspicious directory junctions or symbolic links pointing to protected system directories. Review WatchDog Anti-Virus logs for restoration events involving quarantined files. Verify that the installed version is not 1.8.640, as this is the affected version.

Impact Analysis

If exploited, this vulnerability could allow attackers to overwrite critical system files or execute malicious code with elevated privileges. This may lead to system compromise, data corruption, or unauthorized access to sensitive information. Users relying on WatchDog Anti-Virus for protection are at risk if the software is not updated.

Compliance Impact

This vulnerability could lead to unauthorized file modifications or code execution, potentially violating data integrity and confidentiality requirements in GDPR and HIPAA. Organizations using affected software may fail compliance audits if the vulnerability is not addressed, risking legal penalties and reputational damage.

Mitigation Strategies

Update WatchDog Anti-Virus to the latest version beyond 1.8.640 to patch the improper link resolution issue. Avoid restoring quarantined files from untrusted sources and manually verify file paths before restoration.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-92253. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart