Fujitsu Security Solution AuthConductor Client Basic up to 2.0.25.0 registry origin validation

Summaryinfo

A vulnerability marked as critical has been reported in Fujitsu Security Solution AuthConductor Client Basic up to 2.0.25.0. The affected element is an unknown function. This manipulation of the argument registry causes origin validation. This vulnerability appears as CVE-2026-20893. The attack requires local access. There is no available exploit.

Detailsinfo

A vulnerability has been found in Fujitsu Security Solution AuthConductor Client Basic up to 2.0.25.0 and classified as critical. Affected by this vulnerability is an unknown code. The manipulation of the argument registry with an unknown input leads to a origin validation vulnerability. The CWE definition for the vulnerability is CWE-346. The product does not properly verify that the source of data or communication is valid. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Origin validation error issue exists in Fujitsu Security Solution AuthConductor Client Basic V2 2.0.25.0 and earlier. If this vulnerability is exploited, an attacker who can log in to the Windows system where the affected product is installed may execute arbitrary code with SYSTEM privilege and/or modify the registry value.

It is possible to read the advisory at fmworld.net. This vulnerability is known as CVE-2026-20893 since 12/22/2025. The exploitation appears to be easy. Attacking locally is a requirement. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 01/07/2026).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• Fujitsu

Name

• Security Solution AuthConductor Client Basic

Version

• 2.0.0
• 2.0.1
• 2.0.2
• 2.0.3
• 2.0.4
• 2.0.5
• 2.0.6
• 2.0.7
• 2.0.8
• 2.0.9
• 2.0.10
• 2.0.11
• 2.0.12
• 2.0.13
• 2.0.14
• 2.0.15
• 2.0.16
• 2.0.17
• 2.0.18
• 2.0.19
• 2.0.20
• 2.0.21
• 2.0.22
• 2.0.23
• 2.0.24
• 2.0.25.0

License

• commercial

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion