CVE-2026-33253

Impact

SANUPS SOFTWARE provided by SANYO DENKI CO., LTD. registers Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://jvn.jp/en/jp/JVN90835713/
• https://products.sanyodenki.com/media/document/sanups/H0033413_jp.pdf
• https://products.sanyodenki.com/media/document/sanups/H0033449_en.pdf