High severity7.8NVD Advisory· Published Jan 25, 2026· Updated Apr 15, 2026

CVE-2020-36935

Description

KMSpico 17.1.0.0 contains an unquoted service path vulnerability in the Service KMSELDI configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path in C:\Program Files\KMSpico\Service_KMS.exe to inject malicious executables and escalate privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Patches

Vulnerability mechanics

References

official-kmspico.comnvd
www.exploit-db.com/exploits/49003nvd
www.vulncheck.com/advisories/kmspico-service-kmseldi-unquoted-service-pathnvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000