DLL Hijacking Vulnerability in eAI Technologies' ERP Software
CVE-2026-2998

8.5HIGH

Key Information:

Vendor

Eai Technologies

Status
Erp F2
Vendor
CVE Published:
23 February 2026

What is CVE-2026-2998?

The ERP software developed by eAI Technologies contains a DLL Hijacking vulnerability, which can be exploited by authenticated local attackers. By placing a specially crafted DLL file in the same directory as the program, these attackers can execute arbitrary code on the affected system. This flaw highlights the importance of secure software configurations and the need for stringent access controls to prevent unauthorized file placements.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

ERP F2 0

References

https://www.twcert.org.tw/tw/cp-132-10722-db7cb-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-10723-14549-2.html
third-party-advisory

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.