CVE-2020-7846: Cnesty Helpcom

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Helpcom before v10.0 contains a file download and execution vulnerability caused by storing hardcoded cryptographic key. It finally leads to a file download and execution via access to crafted web page.

Affected products

• Cnesty Helpcom: before 10.0 (fixed in 10.0)

Published 2021-02-24. Last modified 2026-06-17.