HIGHCVSS v3.1 7.8Vulnerability

CVE-2026-110746

A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT AUTHORITY\SYSTEM.

Properties

Severity
HIGH
Nvd fetched at
2026-10-20T21:14:08.448323+00:00
Epss score
0.00212
Cvss severity
HIGH
Cvss score
7.8
Retrieved at
2026-10-21T01:24:48+00:00
Last source
FIRST EPSS
Score
7.8
Cvss version
3.1
Cve id
CVE-2026-110746
Cvss vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
First seen by Signal
2026-10-18T13:39:03+00:00
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published at
2026-10-15T15:17:28.487
Last modified
2026-10-16T16:00:33.533
Epss percentile
0.10817

Related Entities (2)

HAS_WEAKNESS (2)

→[Weakness]Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
→[Weakness]Relative Path Traversal

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2026-110746 (CVSS v3.1 7.8) — Ninja Signal Threat Intelligence | Ninja Signal