High severity7.8NVD Advisory· Published Jun 19, 2026· Updated Jun 23, 2026

CVE-2016-20089

Description

Iperius Remote 1.7.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with SYSTEM privileges by exploiting the service installation path. When installed from directories containing spaces, attackers can place malicious executables in the path to be executed with elevated privileges during service startup or system reboot.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Iperius/Iperius Remotellm-fuzzy
Range: =1.7.0

Patches

Vulnerability mechanics

References

www.iperiusremote.comnvd
www.exploit-db.com/exploits/40427nvd
www.iperiusremote.com/download.aspxnvd
www.vulncheck.com/advisories/iperius-remote-unquoted-service-path-elevation-of-privilegenvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000