CVE-2026-4869EPSS p1.3%

CVE-2026-4869CVE-2026-4869

Description

A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compressed Basic MSI setup with Prerequisites from an insecure location. If a local administrator launches a compressed Setup.exe with Prerequisites from an unsecured location, the Prerequisite installers also might load from an unsecured location, potentially leading to privilege escalation.

Scoring

EPSS0.11% probability of exploitation · percentile 1.3% · 2026-10-15T12:03:56Z
Last modified2026-10-16
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.