CVE-2020-13866

—

CVSS 3.1

7.8 high

EPSS

1%p63

Published

Jun 8, 2020 (Jun 8, 2020)

Modified

Jun 17, 2026

Description

WinGate v9.4.1.5998 has insecure permissions for the installation directory, which allows local users to gain privileges by replacing an executable file with a Trojan horse.

Vendors: qbik
Products: wingate
Weakness: CWE-732
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.