CVE-2026-66839
Medium · 6.7CVSS
6.7
EPSS
—
Published
Aug 5, 2026
CISA due date
—
The record
NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path or Element vulnerability (CWE-428). An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-18755 A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with… CWE-428
- CVE-2026-9128 A code execution security issue exists within Studio 5000 Logix Designer® due to an… CWE-428
- CVE-2020-37253 Winstep 18.06.0096 contains an unquoted service path vulnerability in the Winstep Xtreme… CWE-428
- CVE-2020-37252 Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in… CWE-428
- CVE-2020-37254 Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an… CWE-428
- CVE-2021-47985 Brother SAPSprint 7.60 contains an unquoted service path vulnerability in the SAPSprint… CWE-428
- CVE-2022-50971 Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService… CWE-428
- CVE-2023-54353 Chromacam 4.0.3.0 contains an unquoted service path vulnerability in the… CWE-428