ZDI-26-973: EmbedThis Updater Heap-based Buffer Overflow Remote Code Execution Vulnerability

Published Nov 13, 2026

Updated

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of EmbedThis Updater. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5.

Event History

Nov 13, 2026

Advisory Published

via ZDI·06:00 AM

Data Sourced

via ZDI·06:00 AM

Description

Frequently Asked Questions

Who can exploit this issue?

A network-adjacent attacker can exploit the vulnerability without authentication. Exploitation can result in arbitrary code execution on an affected EmbedThis Updater installation.

What access does an attacker need before exploitation?

The attacker must be network-adjacent to the affected installation. No valid account or other authentication is required.

How severe is the reported issue?

The issue has a CVSS rating of 7.5 according to ZDI.

ZDI-26-973: EmbedThis Updater Heap-based Buffer Overflow Remote Code Execution Vulnerability

Event History

Frequently Asked Questions

Who can exploit this issue?

What access does an attacker need before exploitation?

How severe is the reported issue?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What access does an attacker need before exploitation?

How severe is the reported issue?