CVE-2026-116596

CVE-2026-116596 · Published 26/10/2026 · updated 26/10/2026

In short

CVE-2026-116596 is a not yet rated vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.13%, higher than 2.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISyncService contract.

References

medium.com/@alisaifeldin/cve-2026-116596-local-privilege-escalation-in-pyrus-sync-for-windows-0fe2417dc8cf
pyrus.com/en/pyrus-sync

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free