The vulnerability identified as CVE-2026-36574 affects CactusViewer version 2.3.0 and involves DLL hijacking, which can be exploited by attackers to escalate privileges and execute arbitrary code. The CVSS 3.1 base score is 7.8, indicating a high severity with attack vector local, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information available at this time.

Successful exploitation of this vulnerability could allow an attacker with local access and the ability to trick a user into interacting with a malicious DLL to gain elevated privileges and execute arbitrary code on the affected system. This can lead to full compromise of confidentiality, integrity, and availability of the affected system running CactusViewer 2.3.0.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when running CactusViewer 2.3.0 and avoid loading untrusted DLLs or running untrusted code. Monitor vendor channels for updates regarding patches or mitigations.