CVE-2026-12663EPSS p1.6%

CVE-2026-12663CVE-2026-12663

Description

A security issue exists within ControlFLASH™, where the installer grants write permissions to the "Everyone" group on a product installation directory. This could allow arbitrary code execution, resulting in an attacker being given the ability to run any commands or code of the attacker's choice on a target machine at the logged-in user's permission level.

Scoring

EPSS0.12% probability of exploitation · percentile 1.6% · 2026-10-05T12:00:23Z
Last modified2026-09-01
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.