PT-2026-31881 · Emocheck · Emocheck

Published 2026-04-10 · Updated 2026-04-10 · CVE-2026-28704

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Emocheck (affected versions not specified)

Description Emocheck insecurely loads Dynamic Link Libraries (DLLs). If a crafted DLL file is placed in the same directory, arbitrary code may be executed with the privilege of the user invoking EmoCheck. This requires user interaction.

Recommendations Verify DLL integrity before running Emocheck.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2026-28704

Affected Products

Emocheck

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-28704 · Security Note
• https://jpcert.or.jp/press/2026/PR20260410.html · Note
• https://twitter.com/giuseppe_1337/status/2042509319652900913 · Twitter Post
• https://twitter.com/CVEnew/status/2042561745835983212 · Twitter Post
• https://jvn.jp/en/jp/JVN00263243 · Note
• https://github.com/JPCERTCC/EmoCheck · Note