PT-2026-3813 · Fspro · Event Log Explorer

Alan Mondragon · CVE-2021-47861 · Published 2026-01-21 · Updated 2026-01-21

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Event Log Explorer version 4.9.3

Description An unquoted service path issue allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit this by placing malicious executables in specific file system locations, which are then executed with LocalSystem account privileges during service startup.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2021-47861

Affected Products

Event Log Explorer

References · 4

• 🔥 https://exploit-db.com/exploits/49704 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47861 · Security Note
• https://vulncheck.com/advisories/event-log-explorer-elodeaeventcollectorservice-unquoted-service-path · Note
• https://eventlogxp.com · Note