CVE-2026-113362: High severity NEC WebSAM Winshare vulnerability

Q: Which installations are affected?

Affected versions are WebSAM Winshare 7.5.0 and earlier, except 7.3.3; 7.6.0; and 7.7.0 through 7.7.1 on Windows.

Q: What access does an attacker need to exploit this issue?

An attacker must already be locally authenticated with low privileges on the Windows system. They can place a crafted DLL in the program installation folder for loading by a SYSTEM-level process.

Q: What is the likely impact of successful exploitation?

Successful exploitation allows arbitrary code execution with SYSTEM privileges, enabling complete compromise of the affected Windows host.

Published Nov 9, 2026

Updated

Improper Access Control in the program installation folder in NEC Corporation WebSAM Winshare Ver 7.5.0 and earlier (excluding Ver 7.3.3), Ver 7.6.0 and Ver 7.7.0 through 7.7.1 on Windows allows a locally authenticated low-privileged attacker to execute arbitrary code with SYSTEM privileges via a crafted DLL file that is loaded by a SYSTEM-level process.

Affected Software

1 affected component

NEC WebSAM Winshare<=7.3.2, >=7.3.4<=7.5.0, =7.6.0, >=7.7.0<=7.7.1

Event History

Nov 9, 2026

CVE Published

via MITRE·04:10 AM

Data Sourced

via MITRE·04:10 AM

DescriptionWeakness

Data Sourced

via NVD·04:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which installations are affected?

Affected versions are WebSAM Winshare 7.5.0 and earlier, except 7.3.3; 7.6.0; and 7.7.0 through 7.7.1 on Windows.

What access does an attacker need to exploit this issue?

An attacker must already be locally authenticated with low privileges on the Windows system. They can place a crafted DLL in the program installation folder for loading by a SYSTEM-level process.

What is the likely impact of successful exploitation?