CVE-2026-81302

CVE-2026-81302 is an incorrect default permission vulnerability (CWE-276) in PALLET CONTROL products, in which shipped file, service, or registry permissions are misconfigured in a way that local low-privileged users can abuse. A local attacker who can run code on a machine where an affected product is installed modifies or replaces privileged components via the weak default permissions, causing their code to run in the context of the Windows SYSTEM account. Successful exploitation yields full local privilege escalation to SYSTEM, giving the attacker complete control of the confidentiality, integrity, and availability of that host. Affected parties are any organizations running PALLET CONTROL on Windows servers or workstations where untrusted or low-privileged users have local access. As of publication there is no known exploitation: the flaw is not in CISA KEV, has no public proof-of-concept, and EPSS estimates only a 0.2% chance of exploitation within 30 days.

What to do: Identify hosts running PALLET CONTROL and restrict local interactive and remote-logon access on them to trusted administrative users, since exploitation requires local access. Check file, service, and registry permissions used by the product for overly permissive defaults, and apply vendor-supplied updates or corrected configurations as soon as they are announced via the JPCERT/CC advisory; monitor for vendor guidance because no fixed version numbers are available in the current data.