PT-2026-4652 · Deepinstinct+1 · Deep Instinct Windows Agent+1

Paulina Girón · Published 2026-01-25 · Updated 2026-01-25 · CVE-2020-36934

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Deep Instinct Windows Agent version 1.2.24.0

Description The Deep Instinct Windows Agent has an issue related to an unquoted service path in the DeepNetworkService. This could allow local users to potentially run code with higher privileges. An attacker could exploit the unquoted path located at C:Program FilesHP Sure SenseDeepNetworkService.exe to inject malicious code. This injected code would then run with LocalSystem permissions when the service starts.

Recommendations Ensure the service path for DeepNetworkService is enclosed in quotes.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-36934

Affected Products

Deep Instinct Windows Agent

Hp Sure Sense

References · 7

• 🔥 https://exploit-db.com/exploits/49020 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-36934 · Security Note
• https://t.me/cveNotify/149806 · Telegram Post
• https://deepinstinct.com/2019/05/22/hp-collaborates-with-deep-instinct-to-roll-out-ai-powered-malware-protection-for-next-generation-hp-elitebook-and-zbook-pcs · Note
• https://vulncheck.com/advisories/deep-instinct-windows-agent-deepnetworkservice-unquoted-service-path · Note
• https://t.me/CVEtracker/42951 · Telegram Post
• https://deepinstinct.com · Note