VulnerabilityAnalyzed
CVE-2026-27653
The installers for multiple products provided by Soliton Systems K.K. contain an issue with incorrect default permissions, which may allow arbitrary code to be executed with SYSTEM privileges.
MEDIUM 5.4EPSS 0.09%
Does this matter?
Lower severity and a low EPSS score (0.09%). Track it; it rarely justifies an emergency change on its own.
Description
The installers for multiple products provided by Soliton Systems K.K. contain an issue with incorrect default permissions, which may allow arbitrary code to be executed with SYSTEM privileges.
- CVSS 4.0
- 5.4 MEDIUMCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.09% probability · 0th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-276, CWE-863
- Affected
- soliton/securebrowser for onegate · soliton/securebrowser ii · soliton/secureworkspace
- Source
- vultures@jpcert.or.jp
References
- https://jvn.jp/en/jp/JVN41357120/Third Party Advisory
- https://www.soliton.co.jp/support/2026/006679.htmlVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.