CVE-2026-116596

Full vulnerability record from the local CVENow database.

Description

Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISyncService contract.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Deferred

Source identifier

[email protected]

Published

2026-10-26 17:17:27.427000

Last modified

2026-10-26 18:41:21.450000

View original CVE JSON

{
  "id": "CVE-2026-116596",
  "sourceIdentifier": "[email protected]",
  "published": "2026-10-26T17:17:27.427",
  "lastModified": "2026-10-26T18:41:21.450",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISyncService contract."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Pyrus",
          "product": "Pyrus Sync",
          "versions": [
            {
              "version": "0",
              "lessThan": "1.8.745.0",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://medium.com/@alisaifeldin/cve-2026-116596-local-privilege-escalation-in-pyrus-sync-for-windows-0fe2417dc8cf",
      "source": "[email protected]"
    },
    {
      "url": "https://pyrus.com/en/pyrus-sync",
      "source": "[email protected]"
    }
  ]
}