CVE-2026-38766 describes a local privilege escalation vulnerability in Protegent 360 v2.0.0.4 by Unistal Systems Pvt. Ltd. The flaw exists in the sub_186f4 function, which can be exploited by a local attacker with limited privileges to gain higher privileges on the affected system. The CVSS 3.1 vector indicates low attack complexity and no user interaction required, with high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is provided, and no known exploits have been observed.

Successful exploitation allows a local attacker to escalate privileges, potentially gaining full control over the affected system. This can lead to unauthorized access to sensitive data, modification of system resources, and disruption of services.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for suspicious activity related to privilege escalation attempts.