CVE-2026-38765 describes a local privilege escalation vulnerability in Protegent 360 v2.0.0.4 by Unistal Systems Pvt. Ltd. The flaw resides in the kernel driver pgsecdl.sys, allowing a local attacker with limited privileges to escalate their rights to a higher level. The CVSS 3.1 vector indicates the attack requires local access with low complexity, no user interaction, and results in high confidentiality, integrity, and availability impact. No official patch or remediation guidance is currently available.

Successful exploitation allows a local attacker to escalate privileges on the affected system, potentially leading to full system compromise including unauthorized access to sensitive data, modification of system files, and disruption of system availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious activity related to the kernel driver pgsecdl.sys. Avoid running untrusted code locally.