CVE-2026-25792

Greenshot is an open source Windows screenshot utility. Versions 1.3.312 and below have untrusted executable search path / binary hijacking vulnerability that allows a local attacker to execute arbitrary code when the affected Windows application launches explorer.exe without using an absolute path. The vulnerable behavior is triggered when the user double-clicks the application’s tray icon, which opens the directory containing the most recent screenshot captured by the application. By placing a malicious executable with the same name in a location searched prior to the legitimate Windows binary, an attacker can gain code execution in the context of the application. This issue did not have a patch at the time of publication.

• CWE-426

• https://github.com/greenshot/greenshot/security/advisories/GHSA-f8v9-7fph-fr2jExploit, Mitigation, Vendor Advisory

Published

Mar 20, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-25786Affected devices do not properly validate and sanitize PLC/s…9.3
• CVE-2026-25787Affected devices do not properly validate and sanitize Techn…9.3
• CVE-2026-25789Affected devices do not properly validate and sanitize filen…7.2
• CVE-2026-2579The WowStore – Store Builder & Product Blocks for WooCommerc…7.5
• CVE-2026-25790Wazuh is a free and open source platform used for threat pre…7.2
• CVE-2026-25791Sliver is a command and control framework that uses a custom…7.5
• CVE-2026-25793Nebula is a scalable overlay networking tool. In versions fr…8.1
• CVE-2026-25794ImageMagick is free and open-source software used for editin…8.2
• CVE-2026-25795ImageMagick is free and open-source software used for editin…7.5
• CVE-2026-25796ImageMagick is free and open-source software used for editin…7.5
• CVE-2026-25797ImageMagick is free and open-source software used for editin…5.3
• CVE-2026-25798ImageMagick is free and open-source software used for editin…7.5