Arbitrary Code Execution Vulnerability in SAProuter on Microsoft Windows

CVE-2026-0487

What is CVE-2026-0487?

The SAProuter application on Microsoft Windows has a security flaw that permits unauthenticated attackers to load dynamic link library (DLL) files from untrusted sources. This vulnerability poses a significant risk as it allows adversaries to manipulate the DLL loading sequence, which can lead to the execution of arbitrary code on compromised systems. Such exploitation can jeopardize essential system operations, impacting the confidentiality, integrity, and availability of critical data.

References