HIGH
Splashtop 8.71.12001.0 - Unquoted Service Path
Published Jan 13, 2026
8.5
HIGHCVSS 4.0
EPSS 0.19%
Description
Splashtop 8.71.12001.0 contains an unquoted service path vulnerability in the Splashtop Software Updater Service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\Splashtop\Splashtop Software Updater\ to inject malicious executables and escalate privileges.
Affected products
-
Affected
- ≥ 0, ≤ 8.71.12001.0
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (4)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-2647 Advisory
- https://www.exploit-db.com/exploits/51182 exploit
- https://www.splashtop.com product
- https://www.vulncheck.com/advisories/splashtop-unquoted-service-path third-party-advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-2647 | Advisory | |
| https://www.exploit-db.com/exploits/51182 | exploit | |
| https://www.splashtop.com | product | |
| https://www.vulncheck.com/advisories/splashtop-unquoted-service-path | third-party-advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulnCheck
Published Jan 13, 2026
Updated May 14, 2026
Reserved Dec 21, 2025
Link CVE-2022-50693
CISA Vulnrichment
Updated Jan 14, 2026
Red Hat
No data
GitHub
No data