CVE-2026-113364: Buffer Overflow

Q: Which deployments are affected?

Affected deployments are NEC WebSAM WinShare on Windows running version 7.5.0 or earlier, version 7.6.0, or versions 7.7.0 through 7.7.2.

Q: Does exploitation require authentication or local access?

No. A remote attacker can exploit the issue without authentication by sending a crafted packet to the affected data receiving process.

Q: What level of access could an attacker obtain?

Successful exploitation allows arbitrary code execution with SYSTEM privileges on the affected Windows system.

Published Nov 9, 2026

Updated

Buffer Overflow in the data receiving process in NEC Corporation WebSAM WinShare Ver 7.5.0 and earlier, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthenticated attacker to execute arbitrary code with SYSTEM privileges via a crafted packet with a malformed data size value in the protocol header.

Affected Software

1 affected component

NEC WebSAM Winshare<=7.5.0, =7.6.0, >=7.7.0<=7.7.2

Event History

Nov 9, 2026

CVE Published

via MITRE·04:14 AM

Data Sourced

via MITRE·04:14 AM

DescriptionWeakness

Frequently Asked Questions

Which deployments are affected?

Affected deployments are NEC WebSAM WinShare on Windows running version 7.5.0 or earlier, version 7.6.0, or versions 7.7.0 through 7.7.2.

Does exploitation require authentication or local access?

No. A remote attacker can exploit the issue without authentication by sending a crafted packet to the affected data receiving process.

What level of access could an attacker obtain?

Successful exploitation allows arbitrary code execution with SYSTEM privileges on the affected Windows system.

CVE-2026-113364: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

Which deployments are affected?

Does exploitation require authentication or local access?

What level of access could an attacker obtain?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

Does exploitation require authentication or local access?

What level of access could an attacker obtain?