CVE-2026-18755

Summary

This vulnerability allows a local attacker to execute arbitrary code by placing a crafted DLL in an unsafe directory, potentially leading to unauthorized access and control of the GV-ASManager process.

Exploitability

Exploitation requires write access to a specific directory and knowledge of the application's search path; it is moderately difficult but feasible for attackers with local privileges.

Blast radius

If exploited, this could result in significant damage, including data theft or system compromise, affecting users running affected versions of GV-ASManager.

Prioritized remediation

Restrict write access to directories used by GV-ASManager and ensure all libraries are sourced from trusted locations.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.