CVE-2026-32680

The record

The installer of RATOC RAID Monitoring Manager for Windows allows to customize the installation folder. If the installation folder is customized to some non-default one, the folder may be left with un-secure ACLs and non-administrative users can alter contents of that folder. It may allow a non-administrative user to execute an arbitrary code with SYSTEM privilege.

Affected packages

Related vulnerabilities

• CVE-2026-107052 Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead… CWE-276
• CVE-2026-114148 Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate… CWE-276
• CVE-2026-112357 GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before… CWE-276
• CVE-2026-115253 An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory… CWE-276
• CVE-2026-11813 A potential improper permissions vulnerability was reported in the Lenovo Filez Client… CWE-276
• CVE-2026-52766 YesWiki is a wiki system written in PHP. CWE-276
• CVE-2026-77393 In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped… CWE-276
• CVE-2026-75166 Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V6_00_05… CWE-276