CVE-2026-113363

{
  "etk_id": "ETK-2026-3928",
  "cve_id": "CVE-2026-113363",
  "display_id": "CVE-2026-113363",
  "ghsa_id": "GHSA-33mf-p2fg-6q78",
  "euvd_id": "EUVD-2026-119797",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Improper input validation in WebSAM WinShare network processing",
  "summary": "WebSAM WinShare on Windows is affected in versions 7.2.0 through 7.5.0, 7.6.0, and 7.7.0 through 7.7.2. An unauthenticated remote attacker able to reach the WinShare network service could execute commands with SYSTEM privileges.",
  "mitigation": "Apply NEC's corrective module for the deployed WinShare release. Until it is installed, restrict network access to the WinShare service to trusted hosts and networks.",
  "vendor": "NEC Corporation",
  "product": "WebSAM WinShare",
  "affected": [
    {
      "affected_notes": [
        "Ver 7.2.0 through 7.5.0",
        "Ver 7.6.0 and Ver 7.7.0 through 7.7.2"
      ],
      "affected_ranges": [],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "WebSAM WinShare",
      "purl": null
    }
  ],
  "cwes": [
    749
  ],
  "cvss_score": 9.3,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
  "epss_score": 0.0106,
  "epss_percentile": 0.6478,
  "epss_asof": "2026-11-09",
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "assessed",
  "exploit": false,
  "pipeline_minutes": 6.83804125,
  "t0_at": "2026-11-09T04:12:35.450000+00:00",
  "signals": {
    "check": {
      "at": "2026-11-09T07:02:24.480130+00:00",
      "days": 0.11792858946759259,
      "is_lower_bound": false,
      "measured_at": "2026-11-09T04:12:35.450000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-11-09T04:12:35.450000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-09T04:12:35.450000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113363"
    }
  }
}