CVE-2022-48226

7.8 highEPSS 0.2%

High (7.8) in gbgplc acuant acufill sdk. EPSS 0.2% chance of exploitation in the next 30 days.

An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During installation, an EXE gets executed out of C:\Windows\Temp. A standard user can create the path file ahead of time and obtain elevated code execution. Permissions need to be modified to prevent manipulation.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2023-04-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gbgplc:acuant_acufill_sdk

References

https://acuant.com
https://hackandpwn.com/disclosures/CVE-2022-48226.pdf
https://acuant.com
https://hackandpwn.com/disclosures/CVE-2022-48226.pdf

Check your stack JSON