ZDI-CAN-28680: ZDI-26-565: Gen Digital CCleaner Link Following Local Privilege Escalation Vulnerability

Published Aug 13, 2026

Updated

This vulnerability allows local attackers to escalate privileges on affected installations of Gen Digital CCleaner. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-12410.

Affected Software

1 affected component

Gen Digital CCleaner

Event History

Aug 13, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-28680?

ZDI-CAN-28680 has a CVSS rating of 7.8, indicating a high severity risk.

How do I fix ZDI-CAN-28680?

To fix ZDI-CAN-28680, update to the latest version of Gen Digital CCleaner that addresses this local privilege escalation vulnerability.

What type of vulnerability is ZDI-CAN-28680?

ZDI-CAN-28680 is a local privilege escalation vulnerability affecting Gen Digital CCleaner.

Who can exploit ZDI-CAN-28680?

Local attackers with the ability to execute low-privileged code on the system can exploit ZDI-CAN-28680.

What software does ZDI-CAN-28680 affect?

ZDI-CAN-28680 affects installations of Gen Digital CCleaner.