C-Prot AppDefense before version 1.0.2729 contains a vulnerability involving improperly controlled modification of dynamically-determined object attributes, which can lead to privilege escalation. The vulnerability is identified as CVE-2026-95648 and has a high severity score of 8.1. It allows an attacker with some privileges to escalate their privileges further without user interaction. No public exploits or known active exploitation have been reported. No patch or remediation details are provided in the available data.