CVE-2026-27748

Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component. During the update process, a privileged service running as SYSTEM deletes a file under C:\\ProgramData without validating whether the path resolves through a symbolic link or reparse point. A local attacker can create a malicious link to redirect the delete operation to an arbitrary file, resulting in deletion of attacker-chosen files with SYSTEM privileges. This may lead to local privilege escalation, denial of service, or system integrity compromise depending on the targeted file and operating system configuration.

• CWE-59

• https://support.avira.com/hc/en-us/articles/360010656158-Current-Avira-versionsRelease Notes
• https://www.avira.com/en/internet-securityProduct
• https://www.gendigital.com/us/en/contact-us/security-advisories/

Published

Mar 5, 2026

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-27742Bludit version 3.16.2 contains a stored cross-site scripting…5.4
• CVE-2026-27743The SPIP referer_spam plugin versions prior to 1.3.0 contain…9.8
• CVE-2026-27744The SPIP tickets plugin versions prior to 4.3.3 contain an u…9.8
• CVE-2026-27745The SPIP interface_traduction_objets plugin versions prior t…8.8
• CVE-2026-27746The SPIP jeux plugin versions prior to 4.1.1 contain a refle…6.1
• CVE-2026-27747The SPIP interface_traduction_objets plugin versions prior t…8.8
• CVE-2026-27749Avira Internet Security contains a deserialization of untrus…7.8
• CVE-2026-2775Mitigation bypass in the DOM: HTML Parser component. This vu…9.8
• CVE-2026-27750Avira Internet Security contains a time-of-check time-of-use…7
• CVE-2026-27751SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 c…9.8
• CVE-2026-27752SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 t…8.2
• CVE-2026-27753SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 c…6.9