CVE-2026-110746

7.8 HIGHpublic exploit available

Published 2026-10-15 · Updated 2026-10-16

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT AUTHORITY\SYSTEM.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-22, CWE-23

Public exploit & PoC references

https://github.com/lukehebe/Vulnerability-Disclosures/tree/main/TotalAV-7.1.17-LPE
https://github.com/lukehebe/Vulnerability-Disclosures/blob/main/TotalAV-7.1.17-LPE/TotalAV_LPE.c

All references

https://github.com/lukehebe/Vulnerability-Disclosures/tree/main/TotalAV-7.1.17-LPE
https://www.totalav.com/
https://github.com/lukehebe/Vulnerability-Disclosures/blob/main/TotalAV-7.1.17-LPE/TotalAV_LPE.c

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

UNSCOREDCVE-2026-102252PoC
MEDIUMCVE-2026-106490PoC
UNSCOREDCVE-2026-13224
HIGHCVE-2014-125130PoC
HIGHCVE-2017-20284
HIGHCVE-2021-48011PoC
HIGHCVE-2023-54403PoC
MEDIUMCVE-2024-58386PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.