This vulnerability involves DLL hijacking in the CactusViewer v2.3.0 application by Wassimulator. An attacker can exploit this by placing a malicious DLL that the application loads, resulting in privilege escalation and arbitrary code execution. The vulnerability was reserved in April 2026 and published in June 2026. No CVSS score or remediation information is provided, and no exploits are known to be active.

Successful exploitation could allow an attacker to escalate privileges and execute arbitrary code on the affected system. This could lead to unauthorized control over the system running CactusViewer v2.3.0. However, no active exploits have been reported, and the extent of impact depends on the attacker's ability to deliver a crafted DLL to the target environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when running CactusViewer v2.3.0, especially regarding the loading of DLLs from untrusted sources. Monitoring for updates from Wassimulator or the project's GitHub repository is recommended.