DLL Execution Vulnerability in Omron UPS Management Application

CVE-2026-5397

What is CVE-2026-5397?

A security flaw in Omron's UPS Management Application allows attackers to exploit improper permissions on the application’s installation directory. This vulnerability enables malicious actors to place a dynamically linked library (DLL) file within the directory, which can be executed with elevated administrator privileges. The application’s behavior of loading DLLs from the same directory during service startup makes it susceptible to such attacks, posing a significant risk to system integrity. Organizations utilizing this UPS management software should take immediate steps to assess their environments and mitigate potential threats.

References