{"id":"CVE-2026-37719","published":"2026-10-05T16:17:13.243","lastModified":"2026-10-06T16:17:07.487","description":"An issue in dormakaba evolo Service (all versions) allows a remote attacker to execute arbitrary code as SYSTEM via a .NET component.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-502"],"vendors":[],"products":[],"references":[{"url":"http://dormakaba.com","tags":[]},{"url":"https://assets.ctfassets.net/y0dk4vkszqeh/7nkbvO1MxCI5nOhzwDMCF9/173fdc4ceb38e4b9b853f79df6ad44d0/DKSA-26-31-031_evolo_Service_1.pdf","tags":[]},{"url":"https://www.dormakabagroup.com/en/security-advisories","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A critical vulnerability in dormakaba evolo Service allows remote attackers to execute arbitrary code as SYSTEM through a .NET component, posing a severe risk to system integrity.","exploitability":"Exploitation is highly feasible with minimal preconditions, as the vulnerability can be triggered remotely.","blast_radius":"If exploited, the impact could be catastrophic, potentially leading to complete system compromise and loss of sensitive data.","remediation":"Disable the affected .NET component or upgrade to the latest version of the dormakaba evolo Service, ensuring it is patched against this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","net-component","system","remote","critical"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-07T08:42:53.747Z"}}