Insecure Permissions Vulnerability in DeepCool's DeepCreative Software
CVE-2026-30266

7.8HIGH

Key Information:

Vendor

DeepCool

Status
DeepCreative
Vendor
CVE Published:
20 April 2026

What is CVE-2026-30266?

The Insecure Permissions vulnerability found in DeepCool's DeepCreative software versions up to 1.2.7 enables local attackers to execute arbitrary code by manipulating crafted files. This vulnerability can lead to unauthorized actions within the affected system, posing a risk to users who utilize DeepCreative for their creative design processes. It's crucial for users to address this security flaw by updating to the latest version of the software and monitoring their systems for any suspicious activities.

References

https://github.com/uncle-hash/vulnerability-research/tree...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.