CVE-2023-26078

PoC —

CVSS 3.1

7.8 high

EPSS

<1%p45

Published

Jul 24, 2023 (Jul 24, 2023)

Modified

Jun 17, 2026

Description

Privilege escalation vulnerability was discovered in Atera Agent 1.8.4.4 and prior on Windows due to mishandling of privileged APIs.

Vendors: atera
Products: atera
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news1 stories

Critical Zero-Days in Atera Windows Installers Expose Users to Privilege Escalation Attacks

The Hacker NewsJul 24, 13:01 UTC · Jul 24, 2023Vulnerability in the wildCVE-2023-26077 CVE-2023-26078 CVE-2023-23397

60