CVE-2026-57919
High
Description
PBackupVSS.exe in Matrix42 Empirum before 25.5 and 26.x before 26.2 creates a named pipe (\\.\pipe\PBackupVSS) with a DACL that grants GENERIC_READ and GENERIC_WRITE permissions to all authenticated users. A low-privileged local attacker can connect to this pipe and send crafted IPC messages to trigger execution of arbitrary commands with SYSTEM privileges via an untrusted search path. This allows privilege escalation by placing a malicious shadow.exe in a controlled working directory.
SeverityHigh
CVSS7.8
Exploit probability—
ProductEmpirum
PublishedJun 29, 2026
First seenJun 29, 2026
Weakness typeCWE-276CWE-276CWE-426CWE-426
How to fix
Update
- Matrix42 Empirum25.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Matrix42 Empirum | No range specified | 25.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.