CVE-2026-4869

UNKNOWN 0.0

Potential Privilege Escalation in InstallShield

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compressed Basic MSI setup with Prerequisites from an insecure location. If a local administrator launches a compressed Setup.exe with Prerequisites from an unsecured location, the Prerequisite installers also might load from an unsecured location, potentially leading to privilege escalation.

CWE	CWE-426
Vendor	flexera
Product	installshield
Published	Oct 13, 2026

Stay Ahead of the Next One

Get instant alerts for flexera installshield

Be the first to know when new unknown vulnerabilities affecting flexera installshield are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Flexera / InstallShield

0 ≤ 2025 R2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

community.revenera.com: https://community.revenera.com/s/article/CVE-2026-4869-Potential-Privilege-Escalation-in-InstallShield-2025-R2-running-Setup-Prerequisites-from-an-insecure-directory

Credits

Sandeep Kumar Singh, AMD