by Kastro
Paper/Archive/CVE-2026-113363

CVE-2026-113363

NEC Corporation WebSAM WinShare — Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through 7.5.0, Ver 7.6.0 a…

CVSS 9.3
critical.is priorityof 100
28
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0No EPSS score.000 × 200.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through 7.5.0, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthenticated attacker to execute arbitrary commands with SYSTEM privileges via a crafted network packet sent to the computer on which WinShare is running.

Affected

ProductAffectedFixed inSource
WebSAM WinShareVer 7.2.0 through 7.5.0, Ver 7.6.0 and Ver 7.7.0 through 7.7.2–CNA

Scores by source

NEC (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References

refjpn.nec.com/security-info/secinfo/nv26-006_en.html