PT-2026-21496 · Eai Technologies · Eai Technologies Erp

Dong-Jie Chen · Published 2026-02-23 · Updated 2026-02-28 · CVE-2026-2998

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions eAI Technologies ERP versions prior to F2

Description The software is susceptible to a DLL hijacking issue. Authenticated local attackers can exploit this by placing a crafted DLL file in the same directory as the program, which allows for arbitrary code execution.

Recommendations Restrict access to the software and monitor for suspicious DLL files.

Fix

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2026-2998

Affected Products

Eai Technologies Erp

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-2998 · Security Note
• https://twcert.org.tw/tw/cp-132-10722-db7cb-1.html · Note
• https://twcert.org.tw/en/cp-139-10723-14549-2.html · Note
• https://twitter.com/cracbot/status/2027338059143107045 · Twitter Post
• https://twitter.com/cracbot/status/2027700359414919398 · Twitter Post
• https://twitter.com/CVEnew/status/2025809026672669148 · Twitter Post
• https://t.me/CVEtracker/45474 · Telegram Post
• https://twitter.com/offseq/status/2025790253487870311 · Twitter Post