ESET Endpoint Encryption and Full Disk Encryption Security Bypass (CVE-2026-75882)
A vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allows an attacker to compromise data integrity, confidentiality, and bypass security policies.
CVE search metadata
CVE search record: CVE-2026-75882. KEV: no. Product: ESET Endpoint Encryption (< 5.4.29.0), ESET Full Disk Encryption (< 2.4.8.0). Brief: ESET Endpoint Encryption and Full Disk Encryption Security Bypass (CVE-2026-75882). Brief link: https://feed.craftedsignal.io/briefs/2026-10-eset-security-vulnerability/
Triage facts
Revision 1- Applicability
- ESET Endpoint Encryption (< 5.4.29.0), ESET Full Disk Encryption (< 2.4.8.0)
- Evidence
- Unknown
- Severity
- High
- Action
- Elevated
- Sources
- 3 public sources
- Freshness
- Revision 1Oct 29, 20:23 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A1Likely
A security vulnerability (CVE-2026-75882) has been identified in ESET Endpoint Encryption and ESET Full Disk Encryption. This flaw allows an attacker to bypass security policies, leading to potential compromises of data confidentiality and integrity. The vulnerability affects ESET Endpoint Encryption versions prior to 5.4.29.0 and ESET Full Disk Encryption versions prior to 2.4.8.0 on Windows systems.
Impact
Successful exploitation may result in the unauthorized disclosure of sensitive data, modification of protected data, or the complete circumvention of disk-level security controls enforced by ESET products.
Recommendation
Identify and update all instances of ESET Endpoint Encryption and ESET Full Disk Encryption to the latest secure versions as defined in ESET security bulletin ca9033.
Immediate actions
Upgrade ESET Endpoint Encryption to 5.4.29.0 or later
Upgrade ESET Full Disk Encryption to 2.4.8.0 or later
Mitigations
Upgrade vulnerable ESET software versions to the patched releases identified in bulletin ca9033
CVE-2026-75882