CVE-2026-27653
- State
- Published
- Severity
- 5.4 Medium
- Published
- Feb 27, 2026
- Updated
- Feb 27, 2026
- Reserved
- Feb 25, 2026
Description
The installers for multiple products provided by Soliton Systems K.K. contain an issue with incorrect default permissions, which may allow arbitrary code to be executed with SYSTEM privileges.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.4 Medium | CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | jpcert |
| 3.0 | 6.7 Medium | CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H | jpcert |
Weaknesses
- CWE-276 Incorrect default permissions
Affected Products
| Product | Versions |
|---|---|
Soliton SecureBrowser for OneGateSoliton Systems K.K. |
|
Soliton SecureBrowser IISoliton Systems K.K. |
|
Soliton SecureWorkspace (formerly WrappingBox)Soliton Systems K.K. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.