CVE-2026-37719

Summary

A critical vulnerability in dormakaba evolo Service allows remote attackers to execute arbitrary code as SYSTEM through a .NET component, posing a severe risk to system integrity.

Exploitability

Exploitation is highly feasible with minimal preconditions, as the vulnerability can be triggered remotely.

Blast radius

If exploited, the impact could be catastrophic, potentially leading to complete system compromise and loss of sensitive data.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the affected .NET component or upgrade to the latest version of the dormakaba evolo Service, ensuring it is patched against this vulnerability.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.