Access Control Flaw in NEC Corporation WebSAM Winshare Software
CVE-2026-113362

8.5HIGH

Key Information:

Vendor

Nec Corporation

Status
Websam Winshare
Vendor
CVE Published:
9 November 2026

What is CVE-2026-113362?

Improper access control exists in the program installation folder of NEC Corporation WebSAM Winshare, which affects versions 7.5.0 and earlier (excluding 7.3.3), as well as versions 7.6.0 and 7.7.0 through 7.7.1 on Windows. This vulnerability allows a locally authenticated attacker with low privileges to exploit the flaw by executing arbitrary code with SYSTEM privileges. The attacker can leverage this weakness by loading a malicious DLL file into a SYSTEM-level process, potentially compromising the entire system.

Affected Version(s)

WebSAM WinShare Ver 7.5.0 and earlier (excluding Ver 7.3.3), Ver 7.6.0 and Ver 7.7.0 through 7.7.1

References

https://jpn.nec.com/security-info/secinfo/nv26-006_en.html

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

reported by Ruslan Sayfiev and Denis Faiustov of Fujitsu Limited, and Masahiro Kawada.
.