CVE-2026-114594
Time-of-check time-of-use (TOCTOU) race condition in Sandisk Dashboard Installer
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
A time-of-check to time-of-use (TOCTOU) race condition in the Sandisk Dashboard installer allows a local, authenticated standard user to replace an installer-staged binary in a user-writable temporary directory between validation and execution. The elevated installer then executes the attacker-controlled binary, resulting in local privilege escalation to a high-integrity (administrative) context. This issue affects Sandisk Dashboard through 5.2.2.3.
| CWE | CWE-367 CWE-379 |
| Vendor | sandisk |
| Product | sandisk dashboard |
| Published | Nov 9, 2026 |
Stay Ahead of the Next One
Get instant alerts for sandisk sandisk dashboard
Be the first to know when new unknown vulnerabilities affecting sandisk sandisk dashboard are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Sandisk / Sandisk Dashboard
0 ≤ 5.2.2.3
References
Credits
Johan Francsics