CVE-2026-27749

Avira Internet Security contains a deserialization of untrusted data vulnerability in the System Speedup component. The Avira.SystemSpeedup.RealTimeOptimizer.exe process, which runs with SYSTEM privileges, deserializes data from a file located in C:\\ProgramData using .NET BinaryFormatter without implementing input validation or deserialization safeguards. Because the file can be created or modified by a local user in default configurations, an attacker can supply a crafted serialized payload that is deserialized by the privileged process, resulting in arbitrary code execution as SYSTEM.

• CWE-502

• https://support.avira.com/hc/en-us/articles/360010656158-Current-Avira-versionsRelease Notes
• https://www.avira.com/en/internet-securityProduct
• https://www.gendigital.com/us/en/contact-us/security-advisories/

Published

Mar 5, 2026

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-27743The SPIP referer_spam plugin versions prior to 1.3.0 contain…9.8
• CVE-2026-27744The SPIP tickets plugin versions prior to 4.3.3 contain an u…9.8
• CVE-2026-27745The SPIP interface_traduction_objets plugin versions prior t…8.8
• CVE-2026-27746The SPIP jeux plugin versions prior to 4.1.1 contain a refle…6.1
• CVE-2026-27747The SPIP interface_traduction_objets plugin versions prior t…8.8
• CVE-2026-27748Avira Internet Security contains an improper link resolution…7.1
• CVE-2026-2775Mitigation bypass in the DOM: HTML Parser component. This vu…9.8
• CVE-2026-27750Avira Internet Security contains a time-of-check time-of-use…7
• CVE-2026-27751SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 c…9.8
• CVE-2026-27752SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 t…8.2
• CVE-2026-27753SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 c…6.9
• CVE-2026-27754SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 u…6.9