PT-2026-56324 · Pupsman · Pupsman

Kazuma Matsumoto · Published 2026-07-08 · Updated 2026-07-08 · CVE-2026-56437

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Pupsman versions prior to 3.9.0

Description An uncontrolled search path element issue allows for DLL hijacking. If a crafted DLL file is placed in the same folder as the affected installer and the installer is executed, arbitrary code may be executed with SYSTEM privilege.

Recommendations Update Pupsman to version 3.9.0 or later.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2026-56437

Affected Products

Pupsman

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-56437 · Security Note
• https://t.me/CVEtracker/59320 · Telegram Post
• https://jvn.jp/en/jp/JVN62347140 · Note
• https://t.me/cveNotify/190887 · Telegram Post
• https://t.me/cveNotify/191183 · Telegram Post
• https://fujielectric.co.jp/products/power_supply/ups/product_detail/software_pupsman.html · Note