CVE-2026-113363
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through 7.5.0, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthenticated attacker to execute arbitrary commands with SYSTEM privileges via a crafted network packet sent to the computer on which WinShare is running.
| CWE | CWE-749 |
| Vendor | nec corporation |
| Product | websam winshare |
| Published | Nov 9, 2026 |
Stay Ahead of the Next One
Get instant alerts for nec corporation websam winshare
Be the first to know when new unknown vulnerabilities affecting nec corporation websam winshare are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
NEC Corporation / WebSAM WinShare
Ver 7.2.0 through 7.5.0, Ver 7.6.0 and Ver 7.7.0 through 7.7.2
References
Credits
🔍 reported by Ruslan Sayfiev and Denis Faiustov of Fujitsu Limited, and Masahiro Kawada.