CVE-2026-26306 in OM Digital Solutions OM Workspace
Summary
The installer for OM Workspace (Windows Edition) Ver 2.4 and earlier insecurely loads Dynamic Link Libraries (DLLs), which could allow an attacker to execute arbitrary code with the privileges of the user invoking the installer.
Responsible
jpcert
Reservation
03/12/2026
Disclosure
03/25/2026
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 352960 | OM Digital Solutions OM Workspace Installer uncontrolled search path | 427 | Not defined | Not defined | CVE-2026-26306 |