CVE-2026-7280 — eMPIA Technology｜AVACAST - Unquoted Service Path
AVACAST developed by eMPIA Technology has a Unquoted Service Path vulnerability, allowing privileged local attackers to place a malicious executable file in a specific directory…
Published: 2026-04-28 · CVSS: 8.4 · CVSS 4.0
AVACAST developed by eMPIA Technology has a Unquoted Service Path vulnerability, allowing privileged local attackers to place a malicious executable file in a specific directory, resulting in arbitrary code execution with system privileges when the AVACAST service starts.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7