PT-2026-3836 · Unknown · Pingzapper

Brian Rodriguez · Published 2026-01-21 · Updated 2026-01-21 · CVE-2021-47886

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Pingzapper version 2.3.1

Description Pingzapper 2.3.1 contains an unquoted service path vulnerability in the PingzapperSvc service. This allows local attackers to potentially execute arbitrary code. The vulnerability exists due to an unquoted path in 'C:Program Files (x86)PingzapperPZService.exe', which enables attackers to inject malicious executables and escalate privileges.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider modifying the service path to include quotes to prevent the execution of unauthorized files.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2021-47886

Affected Products

Pingzapper

References · 6

• 🔥 https://exploit-db.com/exploits/49626 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47886 · Security Note
• https://pingzapper.com/download · Note
• https://t.me/CVEtracker/42675 · Telegram Post
• https://vulncheck.com/advisories/pingzapper-pingzappersvc-unquoted-service-path · Note
• https://pingzapper.com · Note