PT-2026-5112 · Prey · Prey

Ömer Tuygun · Publicado 2026-01-28 · Atualizado 2026-01-28 · CVE-2020-36986

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Prey version 1.9.6

Description The software contains an unquoted service path issue that may allow local users to execute code with elevated privileges. An attacker can exploit the unquoted path within the CronService to insert malicious code, which could then execute during application startup or system reboot.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the CronService to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2020-36986

Produtos afetados

Prey

Referências · 9

• 🔥 https://exploit-db.com/exploits/48967 · Exploit
• https://preyproject.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-36986 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-36986 · Aviso do Fabricante
• https://t.me/CVEtracker/43143 · Publicação no Telegram
• https://t.me/cveNotify/150129 · Publicação no Telegram
• https://ubuntu.com/security/CVE-2020-36986 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2020-36986 · Nota de Segurança
• https://vulncheck.com/advisories/prey-cronservice-unquoted-service-path · Nota