CVE-2026-26846
Received Received - Intake

Buffer Overflow in WEINVEIW EBPro via UtilityManagerEx.exe

Vulnerability report for CVE-2026-26846, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: MITRE

Description

Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute arbitrary code via the UtilityManagerEx.exe component

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-16
Last Modified
2026-10-16
Generated
2026-10-16
AI Q&A
2026-10-16
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
n/a n/a n/a

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-26846 is a buffer overflow vulnerability in WEINVEIW CO.,LTD's EBPro software version 6.10.01.510_20251022. It allows a remote attacker to execute arbitrary code through the UtilityManagerEx.exe component due to improper input validation.

Detection Guidance

To detect CVE-2026-26846, check if the vulnerable version v.6.10.01.510_20251022 of EBPro is installed on your system. Look for the UtilityManagerEx.exe component in the installation directory. Verify network traffic involving this executable, particularly if it accepts remote inputs.

Impact Analysis

This vulnerability could allow attackers to take control of the affected system remotely, potentially leading to data theft, system damage, or unauthorized access. Users running the vulnerable EBPro version should update immediately.

Compliance Impact

The provided CVE data does not specify direct impacts on compliance with standards like GDPR or HIPAA. However, a buffer overflow vulnerability allowing remote code execution could potentially lead to unauthorized access, data breaches, or system compromise, which may violate data protection requirements under GDPR or HIPAA depending on the affected system's use case.

Mitigation Strategies

Immediately update EBPro to the latest version if a patch is available. Isolate affected systems from critical networks. Monitor network traffic for suspicious activity targeting UtilityManagerEx.exe. Disable remote access to UtilityManagerEx.exe if not required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-26846. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart