An issue in Unistal Systems Pvt. (CVE-2026-38766)
Source GCVE Database
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 3% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
GitHub Actionsunistalsystemspvtltd/Protegent360pkg:github/unistalsystemspvtltd/Protegent360Other threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Until an official fix is available, restrict local access to trusted users only and monitor for suspicious activity related to privilege escalation attempts.
Description
A vulnerability in Unistal Systems Pvt. Ltd. Protegent 360 version 2.0.0.4 allows a local attacker to escalate privileges via the sub_186f4 function. This issue is classified under CWE-269, indicating improper privilege management. The vulnerability has a high severity rating and affects confidentiality, integrity, and availability. No patch or remediation information is currently available, and no known exploits are reported in the wild.
Impact
Successful exploitation allows a local attacker to escalate privileges, potentially gaining full control over the affected system. This can lead to unauthorized access to sensitive data, modification of system resources, and disruption of services.
Summary
CVE-2026-38766 describes a local privilege escalation vulnerability in Protegent 360 v2.0.0.4 by Unistal Systems Pvt. Ltd. The flaw exists in the sub_186f4 function, which can be exploited by a local attacker with limited privileges to gain higher privileges on the affected system. The CVSS 3.1 vector indicates low attack complexity and no user interaction required, with high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is provided, and no known exploits have been observed.