CVE-2026-30266
High · 7.8CVSS
7.8
EPSS
0.2%
Published
Apr 20, 2026
CISA due date
—
The record
Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.12 and before allows a local attacker to execute arbitrary code via a crafted file
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-7891 The VerySecureApp made by DIVD using Mendix Studio Pro 11.8.0 Beta allows unintended data… CWE-277
- GHSA-q3jj-46pq-826r OpenClaw's ACP child sessions inherit subagent security envelope constraints CWE-277
- CVE-2026-20630 A permissions issue was addressed with additional restrictions. CWE-277
- CVE-2025-32092 Insecure inherited permissions for some Intel(R) Graphics Software before version… CWE-277
- CVE-2025-65111 SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can… CWE-277
- CVE-2025-64185 Open OnDemand is an open-source HPC portal. CWE-277
- CVE-2025-24327 Insecure inherited permissions for some Intel(R) Rapid Storage Technology Application… CWE-277