PT-2026-7413 · Microsoft · Bitdefender For Linux

Michal Kamensky · Published 2026-02-10 · Updated 2026-02-11 · CVE-2026-21537

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Defender for Linux (affected versions not specified)

Description The software contains a flaw in how it generates code, potentially allowing an attacker on the same network to run code without authorization. There is no information about the number of potentially affected devices or any real-world incidents where this issue was exploited. The issue involves improper control of code generation, also known as 'code injection'.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2026-01790

CVE-2026-21537

Affected Products

Bitdefender For Linux

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-21537 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21537 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01790 · Security Note
• https://twitter.com/vuldb/status/2021654267866796059 · Twitter Post