CVE-2026-118450: Venere loads replaceable unsigned components from a writable installation location

Published Nov 9, 2026

Updated

Venere is installed outside Program Files and loads/registers unsigned components from locations where an unprivileged user may create files.

Affected Software

1 affected component

Venere

Event History

Nov 9, 2026

CVE Published

via MITRE·11:45 AM

Data Sourced

via MITRE·11:45 AM

DescriptionWeakness

Data Sourced

via NVD·12:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

Venere deployments are exposed when the software is installed outside Program Files and an unprivileged user can create files in locations from which Venere loads or registers components.

What level of access does an attacker need?

An attacker needs local access with low privileges. No user interaction is required.

What could successful exploitation affect?

Successful exploitation can have high impact on the confidentiality, integrity, and availability of the affected Venere installation. The CVSS vector indicates the impact is limited to the vulnerable component's security authority.

How can administrators identify affected installations?

Check Venere's installation path and the effective permissions on directories used for component loading or registration. An installation matches the described exposure if it is outside Program Files and ordinary unprivileged users can create files in those component locations.

CVE-2026-118450: Venere loads replaceable unsigned components from a writable installation location

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

What level of access does an attacker need?

What could successful exploitation affect?

How can administrators identify affected installations?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What level of access does an attacker need?

What could successful exploitation affect?

How can administrators identify affected installations?