PT-2026-5116 · Unknown · Input Director

Touhami Kasbaoui · Published 2026-01-28 · Updated 2026-01-28 · CVE-2020-36990

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Input Director version 1.4.3

Description Input Director version 1.4.3 has a security issue related to an unquoted service path in its Windows service configuration. This allows local attackers to potentially run code with elevated privileges. Exploitation can occur during system startup or reboot, enabling attackers to inject and execute malicious executables with LocalSystem permissions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-36990

Affected Products

Input Director

References · 5

• 🔥 https://exploit-db.com/exploits/48795 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-36990 · Security Note
• https://t.me/CVEtracker/43147 · Telegram Post
• https://vulncheck.com/advisories/input-director-input-director-unquoted-service-path · Note
• https://inputdirector.com · Note