PT-2026-3836 · Unknown · Pingzapper

Brian Rodriguez · Publicado 2026-01-21 · Atualizado 2026-01-21 · CVE-2021-47886

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Pingzapper version 2.3.1

Description Pingzapper 2.3.1 contains an unquoted service path vulnerability in the PingzapperSvc service. This allows local attackers to potentially execute arbitrary code. The vulnerability exists due to an unquoted path in 'C:Program Files (x86)PingzapperPZService.exe', which enables attackers to inject malicious executables and escalate privileges.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider modifying the service path to include quotes to prevent the execution of unauthorized files.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2021-47886

Produtos afetados

Pingzapper

Referências · 6

• 🔥 https://exploit-db.com/exploits/49626 · Exploit
• https://pingzapper.com/download · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2021-47886 · Nota de Segurança
• https://t.me/CVEtracker/42675 · Publicação no Telegram
• https://vulncheck.com/advisories/pingzapper-pingzappersvc-unquoted-service-path · Nota
• https://pingzapper.com · Nota