PT-2026-30358 · Undefined · Undefined

CVE-2016-20061 · Published 2026-04-04 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions sheed AntiVirus version 2.3

Description The ShavProt service contains an unquoted service path issue. This allows local attackers to escalate privileges by placing a malicious executable within the unquoted binary path. Upon a service restart or system reboot, the malicious code is executed with LocalSystem privileges.

Recommendations Update sheed AntiVirus version 2.3 to a version that fixes the unquoted service path in the ShavProt service.

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2016-20061

Affected Products

Undefined

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2016-20061 · Security Note
• https://vulncheck.com/advisories/sheed-antivirus-unquoted-service-path-privilege-escalation · Note
• http://dl.sheedantivirus.ir/setup.exe · Note
• http://sheedantivirus.ir · Note
• https://t.me/cveNotify/208464 · Telegram Post
• https://exploit-db.com/exploits/40497 · Note