CVE-2026-34488 describes a DLL search path vulnerability in i-PRO Co., Ltd.'s IP Setting Software. The software insecurely handles the DLL search path, which can be manipulated to load unauthorized DLLs. Successful exploitation could result in arbitrary code execution with administrative privileges. The vulnerability affects versions prior to V5.20. The CVSS 3.0 score is 7.3, indicating a high severity with local attack vector, low attack complexity, requiring low privileges and user interaction, and impacts confidentiality, integrity, and availability.

If exploited, this vulnerability allows an attacker with local access and limited privileges to execute arbitrary code with administrative rights on the affected system. This could lead to full system compromise, including unauthorized access, data modification, or denial of service. However, there are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict local access to trusted users only and avoid running the vulnerable software in untrusted environments. Monitor vendor communications for updates regarding patches or official mitigations.