CVE-2026-18397: SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability
Published Oct 1, 2026
·Updated
This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component.
The attack leverages an unrestricted messaging interface between an attacker-controlled web page and the native host, allowing malicious input to bypass security checks.
Affected Software
1 affected component
SConnect native host
Event History
Oct 1, 2026
CVE Published
via MITRE·09:49 PM
Data Sourced
via MITRE·09:49 PM
DescriptionWeakness
Data Sourced
via NVD·10:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to attempt exploitation?
No authentication is required. The attack is initiated through an attacker-controlled web page that communicates with the SConnect native host.
2
Which deployments should be prioritized for investigation?
Systems with the SConnect native host component installed should be prioritized, because the vulnerability is in that native host rather than an unspecified surrounding product component.