CVE-2026-77827

Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\ProgramData\Maono'. Fixed in 4.0.80.

Scoring

Severity

HIGH

CVSS base score

8.4

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

EPSS probability

0.17%

CWE

CWE-428

Published

2026-09-08

Last modified

2026-09-08

Affected products

• Maono Maono Link
• Maono Maono Link

Weakness type

• CWE-428

Related vulnerabilities

• CVE-2026-66839 — NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path...
• CVE-2026-18755 — GV-ASManager DLL hijacking vulnerability
• CVE-2026-9128 — Studio 5000 Logix Designer® – Multiple Vulnerabilities
• CVE-2026-8864 — HP Fan Control App – Potential Escalation of Privilege
• CVE-2025-71326 — AVAST Antivirus 25.11 Unquoted Service Path Privilege Escalation
• CVE-2023-54353 — Chromacam 4.0.3.0 Unquoted Service Path Privilege Escalation
• CVE-2022-50971 — Malwarebytes 4.5 Unquoted Service Path Privilege Escalation
• CVE-2021-47985 — Brother SAPSprint 7.60 Unquoted Service Path Privilege Escalation

Markdown version · Browse all CVEs