Cpe:2.3:a:eset:av_remover:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3aesetav_remover/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 09 Sep 2026 18:50:16 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgPrivilege Escalation Vulnerability in ESET AV Removerhttps://feed.craftedsignal.io/briefs/2026-09-eset-privesc/Wed, 09 Sep 2026 18:50:16 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-09-eset-privesc/A privilege escalation vulnerability, CVE-2026-12858, in ESET AV Remover allows local attackers to gain elevated privileges on affected host systems.The French National Cybersecurity Agency (ANSSI) has published an advisory regarding a security vulnerability found in ESET AV Remover, an ESET utility used for uninstalling antivirus software. The vulnerability, tracked as CVE-2026-12858, permits an attacker with local access to the system to escalate privileges. This flaw resides in versions of AV Remover prior to 1.6.17.0. Security teams should prioritize patching this utility, as successful exploitation enables an attacker to move from a lower-privileged user context to higher-level access, potentially resulting in full system compromise. The issue was disclosed by ESET in their security bulletin ca9000 on September 9, 2026.

Impact

Successful exploitation of CVE-2026-12858 allows an attacker to achieve privilege escalation on a compromised machine. This grants the attacker the ability to execute code with elevated rights, bypass standard security controls, and perform unauthorized modifications to the operating system or installed applications.

Recommendation

Update all instances of ESET AV Remover to version 1.6.17.0 or later immediately to mitigate CVE-2026-12858. Consult the ESET security bulletin ca9000 for specific deployment procedures regarding the patch.

]]>highadvisoryprivilege-escalationvulnerabilitysecurity-update