Incorrect Default Permissions Vulnerability in FinalCode Client by Digital Arts Inc.
CVE-2026-23703

8.5HIGH

Key Information:

Vendor

Digital Arts Inc.

Status
Finalcode Ver.5 Series
Finalcode Ver.6 Series
Vendor
CVE Published:
26 February 2026

What is CVE-2026-23703?

The installer for FinalCode Client from Digital Arts Inc. is susceptible to an incorrect default permissions issue, allowing non-administrative users to execute arbitrary code with SYSTEM privileges. This vulnerability might enable malicious actors to gain elevated access to system resources, posing significant security risks for users and organizations utilizing the software. Proper updates are crucial to mitigate the risk associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

FinalCode Ver.5 series prior to 5.43R01

FinalCode Ver.6 series prior to 6.51R01

References

https://www.daj.jp/shared/php/downloadset/c/parts.php?pag...
https://jvn.jp/en/jp/JVN48498976/

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.