CVE-2026-12518

High

Description

A local privilege escalation vulnerability in the Logitech Logi Options+ updater service on Windows allows a low-privileged local user to execute arbitrary code as SYSTEM.

SeverityHigh
CVSS8.5
Exploit probability—
ProductLogi Options+
PublishedSep 14, 2026
First seenSep 14, 2026

How to fix

Update
  • Logitech Logi Options+2.7.0 or later

Affected products

ProductAffected versionsFixed in
Logitech Logi Options+1.88.0 ≤ v < 2.7.02.7.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-12518 · Logi Options+ · Dark Radar