High severity7.8NVD Advisory· Published Oct 15, 2026· Updated Oct 15, 2026

CVE-2026-110746

Description

A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT AUTHORITY\SYSTEM.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

TotalAV/TotalAVllm-fuzzy

Patches

Vulnerability mechanics

References

github.com/lukehebe/Vulnerability-Disclosures/blob/main/TotalAV-7.1.17-LPE/TotalAV_LPE.cnvd
github.com/lukehebe/Vulnerability-Disclosures/tree/main/TotalAV-7.1.17-LPEnvd
www.totalav.comnvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000