CVE-2026-25676 - Vulnerability Analysis
HighCVSS: 7.8Last Updated: February 12, 2026
M-Track Duo HD - Remote Code Execution & Privilege Escalation
Overview
M-Track Duo HD 1.0.0 contains a DLL search path vulnerability caused by insecure DLL loading, letting attackers execute arbitrary code with administrator privileges, exploit requires local execution.
Severity & Score
Impact
Attackers can execute arbitrary code with administrator privileges, leading to full system compromise.
Mitigation
Update to the latest version with fixed DLL search path handling.
References
Social Media Activity(1 post)
š CVE-2026-25676 - High (7.8) The installer of M-Track Duo HD version 1.0.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrator privileges. š https://www.thehackerwire.com/vulnerability/CVE-2026-25676/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
View original postGitHub Repositories(1 repo)
Related Resources
Details
- CVE ID
- CVE-2026-25676
- Severity
- High
- CVSS Score
- 7.8
- Type
- undefined
- Status
- unconfirmed
- EPSS
- 1.4%
- Social Posts
- 1
CWE
- CWE-427
CVSS Metrics
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H