What is GHSA-mhw9-97qw-42pq?

GHSA-mhw9-97qw-42pq is a security advisory published by GitHub Security Advisories with High severity. Improper Access Control in the program installation folder in NEC Corporation WebSAM Winshare Ver...

Which CVE IDs does GHSA-mhw9-97qw-42pq cover?

GHSA-mhw9-97qw-42pq covers the following CVE IDs: CVE-2026-113362. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-mhw9-97qw-42pqHigh

Improper Access Control in the program installation folder in NEC Corporation WebSAM Winshare Ver...

Vendor

GitHub Security Advisories

Published

November 9, 2026

Last Modified

November 9, 2026

🔗 CVE IDs covered (1)

CVE-2026-113362 →

📋 Description

Improper Access Control in the program installation folder in NEC Corporation WebSAM Winshare Ver 7.5.0 and earlier (excluding Ver 7.3.3), Ver 7.6.0 and Ver 7.7.0 through 7.7.1 on Windows allows a locally authenticated low-privileged attacker to execute arbitrary code with SYSTEM privileges via a crafted DLL file that is loaded by a SYSTEM-level process.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-113362
https://jpn.nec.com/security-info/secinfo/nv26-006_en.html
https://github.com/advisories/GHSA-mhw9-97qw-42pq