PT-2026-5115 · Forensit · Forensit Appx Management Service

Burhanettin Özgenç · Published 2026-01-28 · Updated 2026-01-28 · CVE-2020-36989

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ForensiT AppX Management Service version 2.2.0.4

Description The ForensiT AppX Management Service contains an unquoted service path issue. This allows local users to potentially run arbitrary code with elevated system privileges. An attacker can exploit the unquoted path in the service configuration to inject malicious code. This code would then execute with LocalSystem account permissions when the service starts.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, modify the service configuration to use quoted paths.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-36989

Affected Products

Forensit Appx Management Service

References · 6

• 🔥 https://exploit-db.com/exploits/48821 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-36989 · Security Note
• https://vulncheck.com/advisories/forensitappxservice-forensitappxserviceexe-unquoted-service-path · Note
• https://t.me/cveNotify/150132 · Telegram Post
• https://forensit.com/downloads.html · Note
• https://t.me/CVEtracker/43146 · Telegram Post