PT-2026-5805 · Texassoft · Cyberplanet

Published 2026-02-04 · Updated 2026-02-05 · CVE-2019-25272

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TexasSoft CyberPlanet version 6.4.131

Description TexasSoft CyberPlanet 6.4.131 contains a security issue due to an unquoted service path in the CCSrvProxy service. This allows local attackers to execute arbitrary code. The unquoted path is located at 'C:Program Files (x86)TenaxSoftCyberPlanetSrvProxy.exe', enabling attackers to inject malicious executables and potentially gain elevated system privileges.

Recommendations Apply appropriate quoting to the service path for the CCSrvProxy service.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2019-25272

Affected Products

Cyberplanet

References · 6

• 🔥 https://exploit-db.com/exploits/47724 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25272 · Security Note
• https://tenaxsoft.com/index.html · Note
• https://t.me/CVEtracker/43775 · Telegram Post
• https://vulncheck.com/advisories/texassoft-cyberplanet-ccsrvproxy-unquoted-service-path · Note
• https://t.me/cveNotify/150933 · Telegram Post