PT-2026-23127 · Unknown · Ups Multi-Ups Management Console

Kazuma Matsumoto · Published 2026-03-05 · Updated 2026-03-09 · CVE-2026-26034

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03)

Description The UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) has an issue related to incorrect default permissions. This allows an attacker to execute arbitrary code with SYSTEM privileges by causing the application to load a specially crafted DLL.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Fix

LPE

Incorrect Default Permissions

Weakness Enumeration

CWE-428

CWE-276

Related Identifiers

CVE-2026-26034

Affected Products

Ups Multi-Ups Management Console

References · 10

• https://osv.dev/vulnerability/CVE-2026-26034 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-26034 · Security Note
• https://jvn.jp/en/jp/JVN56544509 · Note
• https://twitter.com/CisoRaging77913/status/2029812594463363587 · Twitter Post
• https://t.me/cveNotify/154263 · Telegram Post
• https://t.me/CVEtracker/46403 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2029441323707572712 · Twitter Post
• https://dell.com/support/home/en-us/drivers/driversdetails?driverid=038h3 · Note
• https://t.me/cveNotify/154850 · Telegram Post
• https://twitter.com/CVEnew/status/2030755417815425038 · Twitter Post