PT-2026-5113 · Unknown · Program Access Controller

Mohammed Alshehri · Publicado 2026-01-28 · Atualizado 2026-01-28 · CVE-2020-36987

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Program Access Controller version 1.2.0.0

Description Program Access Controller 1.2.0.0 contains an unquoted service path vulnerability in PACService.exe that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted path during system startup or reboot to inject and run malicious executables with LocalSystem permissions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2020-36987

Produtos afetados

Program Access Controller

Referências · 6

• 🔥 https://exploit-db.com/exploits/48966 · Exploit
• https://t.me/cveNotify/150130 · Publicação no Telegram
• https://gearboxcomputers.com · Nota
• https://t.me/CVEtracker/43144 · Publicação no Telegram
• https://vulncheck.com/advisories/program-access-controller-pacserviceexe-unquoted-service-path · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-36987 · Nota de Segurança