CVE-2026-92253

Medium

Description

Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attackers to cause a quarantined file to be written to an arbitrary filesystem location by creating a directory junction at the original file path and persuading an administrator to restore the file. This may enable modification of protected files or SYSTEM-level code execution through DLL hijacking.

SeverityMedium
CVSS5.2
Exploit probability—
ProductAnti-Virus
PublishedSep 20, 2026
First seenSep 20, 2026

How to fix

Update
  • WatchDog Anti-Virus1.8.804 or later

Affected products

ProductAffected versionsFixed in
WatchDog Anti-Virus1.8.640 ≤ v < 1.8.8041.8.804

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.