CVE-2026-30266

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2026-30266", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2026-07-05T16:15:42.385Z", "dateReserved": "2026-03-04T00:00:00.000Z", "datePublished": "2026-04-20T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-07-05T16:15:42.385Z"}, "descriptions": [{"lang": "en", "value": "Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.12 and before allows a local attacker to execute arbitrary code via a crafted file"}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://github.com/uncle-hash/vulnerability-research/tree/main/CVE-2026-30266"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-277", "lang": "en", "description": "CWE-277 Insecure Inherited Permissions"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-04-20T17:25:33.172119Z", "id": "CVE-2026-30266", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-20T17:25:38.552Z"}}]}, "dataVersion": "5.2"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-30266", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-20T17:25:33.172119Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-277", "description": "CWE-277 Insecure Inherited Permissions"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-20T17:25:26.918Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "http://deepcool.com"}, {"url": "http://deepcreative.com"}, {"url": "https://github.com/uncle-hash/vulnerability-research/tree/main/CVE-2026-30266"}], "descriptions": [{"lang": "en", "value": "Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.12 and before allows a local attacker to execute arbitrary code via a crafted file"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-04-23T13:40:34.695Z"}}}, "cveMetadata": {"cveId": "CVE-2026-30266", "state": "PUBLISHED", "dateUpdated": "2026-04-23T13:40:34.695Z", "dateReserved": "2026-03-04T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2026-04-20T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cve@mitre.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:deepcool:deepcreative:*:*:*:*:*:*:*:*", "matchCriteriaId": "885B582B-F47D-4A5D-96A7-9E4F94FA4AA3", "versionEndExcluding": "1.2.12", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.12 and before allows a local attacker to execute arbitrary code via a crafted file"}, {"lang": "es", "value": "Vulnerabilidad de permisos inseguros en DeepCool DeepCreative v.1.2.12 y anteriores permite a un atacante local ejecutar c\u00f3digo arbitrario mediante un archivo manipulado."}], "id": "CVE-2026-30266", "lastModified": "2026-11-11T23:10:00.263", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-30266", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-04-20T17:25:33.172119Z", "version": "2.0.3"}}]}, "published": "2026-04-20T17:16:33.377", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://github.com/uncle-hash/vulnerability-research/tree/main/CVE-2026-30266"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-277"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.2.7]"}}], "enrichment": {"confidence": 80.0, "confidence_source": "inferred", "scores": [{"score": 80.0, "source": "inferred"}]}, "original": {"product": "n/a", "source": "cna", "vendor": "n/a"}, "product": "deepcreative", "vendor": "deepcool"}], "analysis": {"en": {"generated_at": "2026-04-29T00:27:12.271922+00:00", "value": {"mitigation_remediation": ["Update DeepCool DeepCreative to a version newer than 1.2.12 that corrects the insecure permission handling.", "Reconfigure the file system permissions for DeepCreative directories so that only the application process can read and execute files; set directories to mode 750 or stricter.", "Restrict local users from creating or modifying files in the DeepCreative installation directory, and enforce strict access controls on any directory that the application scans for configuration or executable files."], "summary": {"action": "Patch Now", "impact": "Local Arbitrary Code Execution via insecure permissions"}, "threat_synthesis": {"affected_systems": "The affected product is DeepCool DeepCreative, versions prior to 1.2.12. No other vendors or products are listed in the CNA data.", "description_and_impact": "Based on the updated description, the vulnerability permits a local attacker who can place a crafted file in a directory monitored by DeepCreative to trigger execution of arbitrary code due to insecure file permissions (CWE\u2011277). The likely attack vector is local file placement. The attacker controls the file\u2019s content, and the application will execute it, potentially enabling unauthorized control over the application and the host operating system. The impact compromises confidentiality, integrity, and availability of the affected host.", "risk_and_exploitability": "The CVSS score of 7.8 indicates a high severity, and the EPSS score is less than 1%. Although it is not listed in CISA\u2019s KEV catalog, this local code execution vulnerability is a very high\u2011risk condition. If the attacker can write files into a directory monitored by DeepCreative, they can execute arbitrary code without additional authentication. The exploitation likelihood is high for systems where the application runs with elevated privileges or unsegmented file permissions, and administrators should assume the risk remains elevated until a vendor update is applied."}}}}, "created": "2026-04-20T18:45:14.230514+00:00", "updated": "2026-04-29T00:30:16.133333+00:00", "vendors": ["deepcool", "deepcool$PRODUCT$deepcreative"]}