Vulnerability · Published Sep 4, 2026 · Assigned by VulnCheck
CVE-2026-6958Acunetix 25.11.251107123 Local Privilege Escalation via wvsc.exe
High 7.8
In plain English
A high-severity uncontrolled search path in Acunetix from Invicti Security Corp.. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).
Official description
Acunetix 25.11.251107123 for Windows contains a local privilege escalation vulnerability in the Web Vulnerability Scanning Engine (wvsc.exe) that allows low-privileged local attackers to execute arbitrary code as SYSTEM by exploiting a missing hardcoded directory path for OpenSSL-related files. Attackers can create the missing directory, place a malicious file at the expected path, and cause the SYSTEM-level wvsc.exe process to load and execute it, resulting in full privilege escalation.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Invicti Security Corp. | Acunetix | 25.11.251107123 |
Weakness: CWE-427 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- SecLists Full Disclosure technical-description, exploit
- Researcher Disclosure technical-description, exploit
- Product Webpage product
- https://www.vulncheck.com/advisories/acunetix-local-privilege-escalation-via-wvsc-exe third-party-advisory
- http://seclists.org/fulldisclosure/2026/Sep/0