CVE-2026-110746

HIGH 7.8

CVE-2026-110746

CVSS Score

7.8

EPSS Score

0.0%

EPSS Percentile

0th

A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT AUTHORITY\SYSTEM.

Vendor	totalsecurity
Product	totalav
Published	Oct 15, 2026
Last Updated	Oct 15, 2026

Stay Ahead of the Next One

Get instant alerts for totalsecurity totalav

Be the first to know when new high vulnerabilities affecting totalsecurity totalav are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

TotalSecurity / TotalAV

0 ≤ 7.1.17

References

NVD ↗ CVE.org ↗ EPSS Data ↗

totalav.com: https://www.totalav.com/ github.com: https://github.com/lukehebe/Vulnerability-Disclosures/tree/main/TotalAV-7.1.17-LPE github.com: https://github.com/lukehebe/Vulnerability-Disclosures/blob/main/TotalAV-7.1.17-LPE/TotalAV_LPE.c