CVE-2026-79298

High

Description

An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute arbitrary code via the BOOTia32.efi and a crafted cloak32.dat file on the ESP.

SeverityHigh
CVSS8.4
Exploit probability—
ProductSysReturn
PublishedSep 16, 2026
First seenSep 16, 2026
Weakness typeCWE-693CWE-693

How to fix

Update
  • Howyar Technologies Inc SysReturn11.3.0.34 or later

Affected products

ProductAffected versionsFixed in
Howyar Technologies Inc SysReturnv ≤ 11.3.03411.3.0.34

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.