CVE-2022-33035

HIGH 7.8CVE-2022-33035 · Published 29/06/2022 · updated 17/06/2026

In short

CVE-2022-33035 is a HIGH (CVSS 7.8) vulnerability affecting xlpd (netsarang).
Chance of exploitation in the next 30 days (EPSS): 0.38%, higher than 31.8% of all vulnerabilities.
Fix: update to 7.0.0103 or later.

Package	Affected versions	Patched versions
xlpd netsarang	`< 7.0.0103`	`7.0.0103`

XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.