PT-2026-5115 · Forensit · Forensit Appx Management Service

Burhanettin Özgenç · Publicado 2026-01-28 · Atualizado 2026-01-28 · CVE-2020-36989

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ForensiT AppX Management Service version 2.2.0.4

Description The ForensiT AppX Management Service contains an unquoted service path issue. This allows local users to potentially run arbitrary code with elevated system privileges. An attacker can exploit the unquoted path in the service configuration to inject malicious code. This code would then execute with LocalSystem account permissions when the service starts.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, modify the service configuration to use quoted paths.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2020-36989

Produtos afetados

Forensit Appx Management Service

Referências · 6

• 🔥 https://exploit-db.com/exploits/48821 · Exploit
• https://vulncheck.com/advisories/forensitappxservice-forensitappxserviceexe-unquoted-service-path · Nota
• https://t.me/cveNotify/150132 · Publicação no Telegram
• https://forensit.com/downloads.html · Nota
• https://t.me/CVEtracker/43146 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2020-36989 · Nota de Segurança