ZDI-26-547: OriginLab OriginPro OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-18288.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Because remote exploitation requires user interaction (the target must visit a malicious page or open a malicious file), mitigate by preventing users from visiting untrusted web pages and from opening untrusted/malicious files in OriginLab OriginPro workflows (e.g., enforce safe browsing and restrict opening files from untrusted sources).
- Compensating control
Monitor for attempts to deliver malicious pages/files related to ZDI-26-547 and block or quarantine suspicious content targeting OriginLab OriginPro systems.
Event History
Frequently Asked Questions
What is the severity of ZDI-26-547?
The severity of ZDI-26-547 is rated at 7.8 on the CVSS scale.
How do I fix ZDI-26-547?
To fix ZDI-26-547, update your installation of OriginLab OriginPro to the latest version available.
What causes the ZDI-26-547 vulnerability?
The ZDI-26-547 vulnerability is caused by an out-of-bounds write during file parsing in OriginLab OriginPro.
Who can be affected by ZDI-26-547?
Users of OriginLab OriginPro are at risk if they open malicious files or visit compromised pages.
What type of attack does ZDI-26-547 enable?
ZDI-26-547 enables remote code execution attacks, allowing attackers to execute arbitrary code on affected systems.