CVE-2025-26859 HIGH

CVE-2025-26859

Vendor Rsupport Co., Ltd.
Product RemoteView PC Application Console
Weakness CWE-427
Published October 15, 2025
Last update October 15, 2025

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

RemoteView PC Application Console versions prior to 6.0.2 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed in the same folder with the affected product, it may cause an arbitrary code execution.

Key dates

02Disclosure timeline

October 15, 2025 CVE published
October 15, 2025 Record updated