CVE-2026-36574

7.8 highEPSS 0.1%

High (7.8). EPSS 0.1% chance of exploitation in the next 30 days.

A DLL hijacking vulnerability in Wassimulator (GitHub) CactusViewer v2.3.0 allows attackers to escalate privileges and execute arbitrary code via a crafted DLL.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
CWE: CWE-427
Published: 2026-06-03
Modified: 2026-07-22
Record from: the NVD, synced 2026-10-19

References

https://github.com/Wassimulator/CactusViewer
https://github.com/Wassimulator/CactusViewer/issues/65
https://github.com/Wassimulator/CactusViewer/releases/download/v2.3.0/CactusViewer.exe
https://github.com/openlabs/docker-wkhtmltopdf-aas/issues/36
https://github.com/Wassimulator/CactusViewer/issues/65

Check your stack JSON