CVE-2026-12663 — ControlFLASH ® – Improper Access Control
A security issue exists within ControlFLASH™, where the installer grants write permissions to the "Everyone" group on a product installation directory. This could allow arbitrar…
Published: 2026-09-01 · CVSS: 7.0 · CVSS 4.0
A security issue exists within ControlFLASH™, where the installer grants write permissions to the "Everyone" group on a product installation directory. This could allow arbitrary code execution, resulting in an attacker being given the ability to run any commands or code of the attacker's choice on a target machine at the logged-in user's permission level.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7