CVE-2026-116596
CVE-2026-116596
Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISyncService contract.
Exploit likelihood
What each source reports
CVE List No score
CVE-2026-116596
Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISyncService contract.
- Record
CVE-2026-116596- Updated
- 2026-11-02
EUVDEUVD-2026-109978 No score
Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISyncService contract.
- Record
EUVD-2026-109978- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-24wx-f8xj-7p3w No score
Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing...
Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISyncService contract.
- Record
GHSA-24wx-f8xj-7p3w- Updated
- 2026-11-02
NVD No score
Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISyncService contract.
- Record
CVE-2026-116596- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-116596 is a vulnerability with no CVSS score yet in Pyrus Sync, published October 26, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.13%, the 2nd percentile. No source names a fixed version.