CVE-2026-1763: Enervista UR Setup DLL Hijacking
Published Feb 10, 2026
·Updated
Vulnerability in GE Vernova Enervista UR Setup on Windows.This issue affects Enervista: 8.6 and previous versions.
Affected Software
1 affected component
GE Vernova Enervista UR Setup<8.6
Remediation
Information
The EnerVista URPC installation software versions prior to 8.70, used an incorrect method of
loading the DLL (dynamic Link Library) file by referencing it relative to the location of the installation
folder. If the system in which the software is installed gets compromised, an attacker could exploit
this weakness and replace the legitimate DLL with a malicious file.
The EnerVista UR Setup software installation has been upgraded to address this vulnerability.
Event History
Feb 10, 2026
CVE Published
via MITRE·08:06 PM
Data Sourced
via MITRE·08:06 PM
RemedyDescriptionSeverity
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-1763?
CVE-2026-1763 is considered a high severity vulnerability due to its DLL hijacking potential.
2
How do I fix CVE-2026-1763?
To fix CVE-2026-1763, upgrade to a version of Enervista UR Setup that is newer than 8.6.
3
What versions of Enervista are affected by CVE-2026-1763?
CVE-2026-1763 affects Enervista versions 8.6 and prior.
4
What type of vulnerability is CVE-2026-1763?
CVE-2026-1763 is classified as a DLL hijacking vulnerability.
5
Who is the vendor associated with CVE-2026-1763?
The vendor associated with CVE-2026-1763 is GE, specifically their Vernova product line.