CVE-2019-16896

PoC —

CVSS 3.1

7.8 high

EPSS

<1%p34

Published

Dec 27, 2019 (Dec 27, 2019)

Modified

Jun 17, 2026

Description

In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll (aka the backup module) improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality.

Vendors: k7computing
Products: k7 ultimate security
Weakness: CWE-59
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.