PT-2026-5112 · Prey · Prey

Ömer Tuygun · Published 2026-01-28 · Updated 2026-01-28 · CVE-2020-36986

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Prey version 1.9.6

Description The software contains an unquoted service path issue that may allow local users to execute code with elevated privileges. An attacker can exploit the unquoted path within the CronService to insert malicious code, which could then execute during application startup or system reboot.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the CronService to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-36986

Affected Products

Prey

References · 9

• 🔥 https://exploit-db.com/exploits/48967 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-36986 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-36986 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-36986 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-36986 · Security Note
• https://preyproject.com · Note
• https://t.me/CVEtracker/43143 · Telegram Post
• https://t.me/cveNotify/150129 · Telegram Post
• https://vulncheck.com/advisories/prey-cronservice-unquoted-service-path · Note