PT-2026-5849 · Syncbreeze+1 · Syncbreeze Enterprise+1

Boku · Published 2026-02-03 · Updated 2026-02-20 · CVE-2020-37100

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sync Breeze Enterprise version 12.4.18

Description Sync Breeze Enterprise 12.4.18 contains an unquoted service path that could allow local attackers to execute arbitrary code with elevated system privileges. The issue arises from an unquoted binary path, enabling attackers to place malicious executables in specific file system locations and hijack the service startup process.

Recommendations Ensure the service path is properly quoted to prevent the execution of unauthorized code.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-37100

Affected Products

Syncbreeze Enterprise

Syncbreeze

References · 6

• 🔥 https://exploit-db.com/exploits/48045 · Exploit
• https://osv.dev/vulnerability/CVE-2020-37100 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-37100 · Security Note
• https://vulncheck.com/advisories/sync-breeze-enterprise-unquoted-service-path · Note
• https://t.me/cveNotify/152605 · Telegram Post
• http://syncbreeze.com · Note