CVE-2026-81302: High severity PALLET CONTROL vulnerability
Published Sep 4, 2026
·Updated
PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a local attacker to execute arbitrary code with SYSTEM privileges on the affected product.
Affected Software
1 affected component
PALLET CONTROL
Event History
Sep 4, 2026
CVE Published
via MITRE·09:04 AM
Data Sourced
via MITRE·09:04 AM
DescriptionSeverity
Data Sourced
via NVD·09:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this vulnerability?
A local attacker with low privileges on an affected PALLET CONTROL product can exploit the incorrect default permission to execute arbitrary code with SYSTEM privileges.
2
What level of access is required before exploitation?
The attacker must already have local access to the affected system and low privileges. No user interaction is required.
3
What is the potential impact if exploitation succeeds?
Successful exploitation can result in arbitrary code execution with SYSTEM privileges, affecting confidentiality, integrity, and availability.