PT-2026-28221 · Ratoc · Ratoc Raid Monitoring Manager For Windows

Published 2026-03-26 · Updated 2026-03-26 · CVE-2026-28760

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RATOC RAID Monitoring Manager for Windows (affected versions not specified)

Description The installer of the software searches the current directory to load certain DLLs. If a user is directed to place a crafted DLL with the installer, arbitrary code may be executed with administrator privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2026-28760

Affected Products

Ratoc Raid Monitoring Manager For Windows

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-28760 · Security Note
• https://ratocsystems.com/topics/userinfo/raidmanager202508 · Note
• https://twitter.com/CVEnew/status/2037137725803946220 · Twitter Post
• https://jvn.jp/en/jp/JVN08057419 · Note