PT-2026-4652 · Deepinstinct+1 · Deep Instinct Windows Agent+1

Paulina Girón · Publicado 2026-01-25 · Atualizado 2026-01-25 · CVE-2020-36934

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Deep Instinct Windows Agent version 1.2.24.0

Description The Deep Instinct Windows Agent has an issue related to an unquoted service path in the DeepNetworkService. This could allow local users to potentially run code with higher privileges. An attacker could exploit the unquoted path located at C:Program FilesHP Sure SenseDeepNetworkService.exe to inject malicious code. This injected code would then run with LocalSystem permissions when the service starts.

Recommendations Ensure the service path for DeepNetworkService is enclosed in quotes.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2020-36934

Produtos afetados

Deep Instinct Windows Agent

Hp Sure Sense

Referências · 7

• 🔥 https://exploit-db.com/exploits/49020 · Exploit
• https://t.me/cveNotify/149806 · Publicação no Telegram
• https://deepinstinct.com/2019/05/22/hp-collaborates-with-deep-instinct-to-roll-out-ai-powered-malware-protection-for-next-generation-hp-elitebook-and-zbook-pcs · Nota
• https://vulncheck.com/advisories/deep-instinct-windows-agent-deepnetworkservice-unquoted-service-path · Nota
• https://t.me/CVEtracker/42951 · Publicação no Telegram
• https://deepinstinct.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-36934 · Nota de Segurança