CVE-2026-0539

Local Privilege Escalation in pcvisit service client

State: Published
Severity: 8.5 High
Published: Apr 22, 2026
Updated: Apr 22, 2026
Reserved: Dec 23, 2025

Description

Incorrect Default Permissions in pcvisit service binary on Windows allows a low-privileged local attacker to escalate their privileges by overwriting the service binary with arbitrary contents. This service binary is automatically launched with NT\SYSTEM privileges on boot. This issue affects all versions after 22.6.22.1329 and was fixed in 25.12.3.1745.

Scores

CVSS	Score	Vector	Source
4.0	8.5 High	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	NCSC.ch

Weaknesses

CWE-276 Incorrect Default Permissions

Affected Products

Product	Versions
pcvisit Remote Host Modulpcvisit	22.6.22.1329 to before 25.12.3.1745Affected before 22.6.22.1329Not affected 25.12.3.1745Not affected

References

https://www.pcvisit.de/kundenbereich/release-notesrelease-notes
https://labs.infoguard.ch/advisories/cve-2026-0539_pcvisit_local-privilege-escalation/third-party-advisorytechnical-description

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.