Vulnerabilities CVE-2026-42881

CVE-2026-42881

High

Open

TLP:CLEAR

STIGQter: Arbitrary File Write leading to Local Code Execution via Export HTML

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

STIGQter is an open-source reimplementation of DISA's STIG Viewer. From 0.1.2 to before 1.2.7, an attacker can achieve local code execution (LCE) with the privileges of the user running STIGQter. This requires user interaction: the victim must open the malicious .stigqter file and explicitly run the "Export HTML" action. This vulnerability is fixed in 1.2.7.

Details

CVSS Score: 8.4
EPSS Score ⓘ: 0.15%

4.8th percentile
CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Confidence: 90%
Published: May 14, 2026
Last Modified: May 14, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.