Remote Code Execution Vulnerability in OriginLab Origin Viewer
CVE-2026-19885

7.8HIGH

Key Information:

Vendor

Originlab

Status
Origin Viewer
Vendor
CVE Published:
15 September 2026

What is CVE-2026-19885?

The OriginLab Origin Viewer has a critical flaw in the parsing of OGWU files, which stems from inadequate validation of user-provided data. This vulnerability enables remote attackers to perform an out-of-bounds write, potentially allowing them to execute arbitrary code in the context of the application. Successful exploitation typically requires user interaction, such as visiting a malicious webpage or opening a compromised OGWU file. This presents a significant security risk to users of the software, making it crucial for individuals and organizations to apply necessary security measures to protect their systems.

Affected Version(s)

Origin Viewer 9.9.5

References

https://www.zerodayinitiative.com/advisories/ZDI-26-585/
x_research-advisory

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.