PT-2026-41460 · Vx Search · Vx Search

Brian Rodriguez · Published 2026-05-16 · Updated 2026-05-16 · CVE-2021-47974

Mitre

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise services that allows local attackers to escalate privileges. Attackers can place malicious executables in unquoted path directories like C:Program FilesVX Search to execute arbitrary code with LocalSystem privileges when services restart.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2021-47974

Affected Products

Vx Search

References · 4

• 🔥 https://exploit-db.com/exploits/50026 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47974 · Security Note
• https://vxsearch.com · Note
• https://vulncheck.com/advisories/vx-search-unquoted-service-path-privilege-escalation · Note