Threat database

CVE-2026-20893 is a high-severity origin validation vulnerability in Fujitsu Security Solution AuthConductor Client Basic V2 (version 2.0.25.0 and earlier). An attacker with login access to a Windows system running the affected software can exploit this flaw to execute arbitrary code with SYSTEM privileges and/or modify registry values. The vulnerability arises from improper origin validation, allowing privilege escalation without requiring user interaction. Although no known exploits are currently in the wild, the impact on confidentiality, integrity, and availability is significant. European organizations using this Fujitsu security product on Windows endpoints are at risk, especially in sectors relying on Fujitsu hardware and software. Mitigation involves promptly updating to a fixed version once available, restricting local user privileges, and monitoring registry changes. Countries with strong Fujitsu market presence and critical infrastructure using these solutions, such as Germany, the UK, and the Netherlands, are most likely to be affected.

EPSS 0.1%VulnerabilityFujitsu Client Computing LimitedGermanyNetherlands+1

Improper restriction of communication channel to intended endpoints issue exists in UpdateNavi V1.4 L10 to L33 and UpdateNaviInstallService Service 1.2.0091 to 1.2.0125. If a local authenticated attacker send malicious data, an arbitrary registry value may be modified or arbitrary code may be executed.