PT-2026-21496 · Eai Technologies · Eai Technologies Erp

Dong-Jie Chen · Publicado 2026-02-23 · Atualizado 2026-02-28 · CVE-2026-2998

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions eAI Technologies ERP versions prior to F2

Description The software is susceptible to a DLL hijacking issue. Authenticated local attackers can exploit this by placing a crafted DLL file in the same directory as the program, which allows for arbitrary code execution.

Recommendations Restrict access to the software and monitor for suspicious DLL files.

Correção

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CVE-2026-2998

Produtos afetados

Eai Technologies Erp

Referências · 8

• https://twcert.org.tw/tw/cp-132-10722-db7cb-1.html · Nota
• https://twcert.org.tw/en/cp-139-10723-14549-2.html · Nota
• https://twitter.com/cracbot/status/2027338059143107045 · Publicação no Twitter
• https://twitter.com/cracbot/status/2027700359414919398 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-2998 · Nota de Segurança
• https://twitter.com/CVEnew/status/2025809026672669148 · Publicação no Twitter
• https://t.me/CVEtracker/45474 · Publicação no Telegram
• https://twitter.com/offseq/status/2025790253487870311 · Publicação no Twitter