VYPR

MyReport Updater

by MyReport

CVEs (1)

  • CVE-2026-110633HigOct 14, 2026
    risk 0.51cvss 7.8epss —

    MyReport Updater through 2.1.1 contains a local privilege escalation vulnerability that allows low-privileged users to make the SYSTEM updater service install attacker-supplied archives into arbitrary directories. Attackers can use UpdaterManager.exe over gRPC to set a malicious…