CVE-2026-8797: Nec Corporation Expressupdate Agent For Windows

High severity, CVSS 8.5. EPSS: 0.1% chance of exploitation in the next 30 days.

An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If a malicious user gains access to the product, arbitrary code could be executed with SYSTEM privileges.

Affected products

• Nec Corporation Expressupdate Agent For Windows: up to and including 3.24

Published 2026-06-26. Last modified 2026-06-26.