VulnerabilityPublished
ZDI-26-973: EmbedThis Updater Heap-based Buffer Overflow Remote Code Execution Vulnerability
Source Zero Day Initiative
0
Severity
HighRated High by Zero Day Initiative
Data as of 13 Nov 2026, 20:34 UTC
What to do
AI-suggested
Until a fix is available, restrict network access to the EmbedThis Updater service to trusted hosts only.
Description
A heap-based buffer overflow vulnerability in EmbedThis Updater allows network-adjacent attackers to execute arbitrary code without authentication. The vulnerability has a high severity rating of 7.5 by ZDI and enables remote code execution.
References
Community reviews
Loading reviews…