Improper Access Control in ESET Encryption Products for Windows
CVE-2026-75882

8.5HIGH

Key Information:

Vendor

Eset Spol. S.r.o.

Status
Eset Endpoint Encryption
Eset Full Disk Encryption
Vendor
CVE Published:
30 October 2026

What is CVE-2026-75882?

An improper access control vulnerability has been identified in ESET's Endpoint Encryption and Full Disk Encryption products. This flaw allows attackers with standard user permissions to access a device interface associated with a privileged kernel driver, enabling them to send specially crafted requests. This vulnerability poses a risk of unauthorized access and potential manipulation of sensitive information, which underscores the importance of timely software updates to secure endpoints against exploitation.

Affected Version(s)

ESET Endpoint Encryption Windows 0 <= 5.4.23.0

ESET Full Disk Encryption Windows 0 <= 2.4.4.0

References

https://support.eset.com/en/ca9033-eset-customer-advisory...

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.