{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-116596","assignerOrgId":"37e5125f-f79b-445b-8fad-9564f167944b","state":"PUBLISHED","assignerShortName":"certcc","dateReserved":"2026-10-26T15:18:49.651Z","datePublished":"2026-10-26T16:17:29.178Z","dateUpdated":"2026-10-26T16:17:29.178Z"},"containers":{"cna":{"title":"CVE-2026-116596","descriptions":[{"lang":"en","value":"Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISyncService contract."}],"source":{"discovery":"UNKNOWN"},"affected":[{"vendor":"Pyrus","product":"Pyrus Sync","versions":[{"status":"affected","version":"0","lessThan":"1.8.745.0","versionType":"custom"}]}],"problemTypes":[{"descriptions":[{"lang":"en","description":"CWE-266: Incorrect Privilege Assignment"}]}],"references":[{"url":"https://pyrus.com/en/pyrus-sync"},{"url":"https://medium.com/@alisaifeldin/cve-2026-116596-local-privilege-escalation-in-pyrus-sync-for-windows-0fe2417dc8cf"}],"x_generator":{"engine":"VINCE 3.0.51","env":"prod","origin":"https://cveawg.mitre.org/api/cve/CVE-2026-116596"},"providerMetadata":{"orgId":"37e5125f-f79b-445b-8fad-9564f167944b","shortName":"certcc","dateUpdated":"2026-10-26T16:17:29.178Z"}}}}