CVE-2026-27653

5.4 mediumEPSS 0.1%

Medium (5.4) in soliton. EPSS 0.1% chance of exploitation in the next 30 days.

The installers for multiple products provided by Soliton Systems K.K. contain an issue with incorrect default permissions, which may allow arbitrary code to be executed with SYSTEM privileges.

Severity

CVSS 4.0

5.4 medium

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

6.7 medium

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
CWEs: CWE-863, CWE-276
Published: 2026-02-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

soliton:securebrowser_for_onegate
soliton:securebrowser_ii
soliton:secureworkspace

References

https://jvn.jp/en/jp/JVN41357120/
https://www.soliton.co.jp/support/2026/006679.html

Check your stack JSON