CVE-2026-109556

Received Received - Intake

Remote Code Execution in EdgeEver Desktop

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: VulnCheck

Description

EdgeEver Desktop 1.92.0 through 1.112.0 contains a remote code execution vulnerability in the desktop:acp-probe IPC handler, which lacks a sender check and spawns a caller-supplied input.path executable. Attackers with script execution in a renderer, such as via template-preview or drag-preview stored cross-site scripting, can call probeAcpAdapter to launch local executables with the user's privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-12

Last Modified

2026-10-12

Generated

2026-10-13

AI Q&A

2026-10-13

EPSS Evaluated

N/A

NVD

CVE-2026-109556

Affected Vendors & Products

Vendor	Product	Version / Range
tianma-if	EdgeEver	1.92.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-749	The product provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted.

Attack-Flow Graph

Executive Summary

EdgeEver Desktop versions 1.92.0 to 1.112.0 have a remote code execution flaw in the desktop:acp-probe IPC handler. The handler does not verify the sender of IPC messages and executes a user-supplied executable path. Attackers with script execution in a renderer can exploit this to run arbitrary local programs with the user's privileges.

Detection Guidance

Detecting this vulnerability requires checking for unauthorized execution of local executables via the EdgeEver Desktop IPC handler. Monitor processes launched by EdgeEver, especially those with unusual paths or arguments. Check logs for calls to probeAcpAdapter with unexpected input.path values.

Impact Analysis

An attacker could execute malicious code on your system if they trick you into visiting a webpage or opening a file that triggers the vulnerable IPC handler. This could lead to data theft, installation of malware, or unauthorized system access.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's data protection requirements or HIPAA's safeguards for protected health information. Organizations may face compliance penalties if exploited.

Mitigation Strategies

Immediately update EdgeEver Desktop to the latest version beyond 1.112.0. Disable or restrict renderer script execution privileges if possible. Implement application allowlisting to block unauthorized executable launches. Monitor network traffic for unusual IPC calls.

Hi! I’m here to help you understand CVE-2026-109556. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70