CVE-2026-56437 in Pupsman

Summary

by MITRE • 07/08/2026

Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the same folder as the affected installer and the installer is executed, arbitrary code may be executed with SYSTEM privilege.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsible: Jpcert
• Reservation: 06/29/2026
• Disclosure: 07/08/2026
• Moderation: accepted
• Entry: VDB-376780
• CPE: ready
• CWE: CWE-427 (confirmed)
• CVSS: 7.0 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-56437
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-56437
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-56437/