Remote Code Execution Vulnerability in OriginLab Origin Viewer
CVE-2026-114562

7.8HIGH

Key Information:

Vendor

Originlab

Status
Origin Viewer
Vendor
CVE Published:
12 November 2026

What is CVE-2026-114562?

The OriginLab Origin Viewer contains a vulnerability that permits remote attackers to execute arbitrary code through the exploitation of OGWU file parsing. This issue arises from inadequate validation of user-supplied data, leading to potential memory corruption. Successful exploitation necessitates user interaction, typically by visiting a malicious webpage or opening a compromised OGWU file. This flaw allows adversaries to manipulate code execution within the context of the vulnerable application, posing significant risks to system integrity and data security.

Affected Version(s)

Origin Viewer 9.9.5

References

https://www.zerodayinitiative.com/advisories/ZDI-26-879/
x_research-advisory
https://docs.originlab.com/cve/CVE-2026-114562
vendor-advisory

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.