CVE Explorer
CVE-2026-20893
Origin validation error issue exists in Fujitsu Security Solution AuthConductor Client Basic V2 2.0.25.0 and earlier. If this vulnerability is exploited, an attacker who can log in to the Windows system where the affected product is installed may execute arbitrary code with SYSTEM privilege and/or modify the registry value.
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1
Preserved source conflicts
No provider value was silently selected as the winner.
cvss · 2 assertions
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"metric_type":"cvssV3_0"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:2a6b066d2117c067bb92d1ea58b38e6bcbf563d94b2f50326d553593f867d3ea · sha256:2764b58204c21b13… · /containers/cna/metrics/0/cvssV3_0
{"metric":{"baseScore":8.5,"baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"},"metric_type":"cvssV4_0"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:2a6b066d2117c067bb92d1ea58b38e6bcbf563d94b2f50326d553593f867d3ea · sha256:2764b58204c21b13… · /containers/cna/metrics/1/cvssV4_0
Affected products and versions
1 source assertion{"product":"Fujitsu Security Solution AuthConductor Client Basic V2","vendor":"Fujitsu Client Computing Limited","versions":[{"status":"affected","version":"2.0.25.0 and earlier"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:2a6b066d2117c067bb92d1ea58b38e6bcbf563d94b2f50326d553593f867d3ea · sha256:2764b58204c21b13… · /containers/cna/affected/0
Provider-owned CVSS observations
2 source assertions{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"metric_type":"cvssV3_0"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:2a6b066d2117c067bb92d1ea58b38e6bcbf563d94b2f50326d553593f867d3ea · sha256:2764b58204c21b13… · /containers/cna/metrics/0/cvssV3_0
{"metric":{"baseScore":8.5,"baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"},"metric_type":"cvssV4_0"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:2a6b066d2117c067bb92d1ea58b38e6bcbf563d94b2f50326d553593f867d3ea · sha256:2764b58204c21b13… · /containers/cna/metrics/1/cvssV4_0
CWE assertions
1 source assertion{"cweId":"CWE-346","description":"Origin validation error","lang":"en-US","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:2a6b066d2117c067bb92d1ea58b38e6bcbf563d94b2f50326d553593f867d3ea · sha256:2764b58204c21b13… · /containers/cna/problemTypes/0/descriptions/0
Source references
2 source assertions{"url":"https://jvn.jp/en/jp/JVN24626628/"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:2a6b066d2117c067bb92d1ea58b38e6bcbf563d94b2f50326d553593f867d3ea · sha256:2764b58204c21b13… · /containers/cna/references/1
{"url":"https://www.fmworld.net/biz/common/info/202601acc/"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:2a6b066d2117c067bb92d1ea58b38e6bcbf563d94b2f50326d553593f867d3ea · sha256:2764b58204c21b13… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.