PT-2025-44234 · Wtw · Wtw Eagle

Published 2025-10-29 · Updated 2025-10-29 · CVE-2025-62776

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WTW EAGLE (for Windows) version 3.0.8.0

Description The installer for WTW EAGLE (for Windows) has a DLL search path issue that could allow for the insecure loading of Dynamic Link Libraries. This could potentially lead to the execution of arbitrary code with the privileges of the running application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-62776

Affected Products

Wtw Eagle

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-62776 · Security Note
• https://twitter.com/CVEnew/status/1983393766548381960 · Twitter Post
• https://wtw.support/wtw/eagle-app-cms-win · Note
• https://t.me/cveNotify/140775 · Telegram Post
• https://t.me/CVEtracker/36021 · Telegram Post
• https://jvn.jp/en/jp/JVN23394606 · Note