PT-2026-27362 · Speedbit · Download Accelerator Plus

Published 2026-03-24 · Updated 2026-03-24 · CVE-2019-25628

Mitre

CVSS v3.1

9.8

Critical

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Download Accelerator Plus DAP 10.0.6.0 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting malicious URLs. Attackers can create specially crafted URLs with overflowing buffer data that overwrites SEH pointers and executes embedded shellcode when imported through the application's web page import functionality.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-25628

Affected Products

Download Accelerator Plus

References · 5

• 🔥 https://exploit-db.com/exploits/46673 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25628 · Security Note
• http://speedbit.com/dap · Note
• http://speedbit.com/dap/download/downloading.asp · Note
• https://vulncheck.com/advisories/download-accelerator-plus-dap-seh-buffer-overflow · Note