Code Injection Vulnerability in CorvusSKK Product by Corvus
CVE-2026-76148

8.4HIGH

Key Information:

Vendor

Sasaki Nobuyuki

Status
Corvusskk
Vendor
CVE Published:
26 August 2026

What is CVE-2026-76148?

CorvusSKK is affected by a code injection vulnerability that allows attackers to execute arbitrary code within the application. This security flaw can potentially lead to unauthorized access and control over the affected system, putting sensitive information at risk. Users are advised to update to the latest version and follow best security practices to mitigate the threat.

Affected Version(s)

CorvusSKK 0 < 3.3.4

References

https://github.com/nathancorvussolis/corvusskk/releases/t...
https://jvn.jp/en/jp/JVN18496672/

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.