{"id":"CVE-2026-116596","published":"2026-10-26T17:17:27.427","lastModified":"2026-10-26T18:41:21.450","description":"Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISyncService contract.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://medium.com/@alisaifeldin/cve-2026-116596-local-privilege-escalation-in-pyrus-sync-for-windows-0fe2417dc8cf","tags":[]},{"url":"https://pyrus.com/en/pyrus-sync","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}