CVE-2026-42936
Last modified
CVE-2026-42936 is a high-severity vulnerability rated 8.4/10 on the CVSS scale. The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privilege of the user invoking the installer.. EPSS estimates a 0.14% chance of exploitation in the next 30 days.
Description
The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privilege of the user invoking the installer.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| SBI SECURITIES Co.,Ltd. | HYPER SBI 2 | < ver.3.20.0 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-42936?
How severe is CVE-2026-42936?
How do I fix CVE-2026-42936?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-4293The affected Kieback & Peter DDC building controllers are vu…5.3
- CVE-2026-42930When running in Appliance mode, an authenticated attacker as…8.7
- CVE-2026-42931Denial of Service via Unbounded io.ReadAll in NPM Package Ta…6.5
- CVE-2026-42932Naxclow device identifiers use fixed manufacturing prefixes …6.9
- CVE-2026-42933Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unint…10
- CVE-2026-42934NGINX Plus and NGINX Open Source have a vulnerability in the…6.3
- CVE-2026-42937Incorrect permission assignment vulnerabilities exist in BIG…7.1
- CVE-2026-42941The Danelec MacGregor Voyage Data Recorder device includes …8.7
- CVE-2026-42944NLnet Labs Unbound 1.14.0 up to and including version 1.25.0…7.5
- CVE-2026-42945NGINX Plus and NGINX Open Source have a vulnerability in the…8.1
- CVE-2026-42946A vulnerability exists in the ngx_http_scgi_module and ngx_h…7.4
- CVE-2026-42947A flaw in Naxclow's platform’s onboarding workflow allows an…8.8
Are you affected by CVE-2026-42936?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST