QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-66264

Back to search

CVE-2025-66264

Published: Nov 26, 2025

Modified: Nov 26, 2025

PUBLISHED

Description

The CMService.exe service runs with SYSTEM privileges and contains an unquoted service path. This allows a local attacker with write privileges to the filesystem to insert a malicious executable in the path, leading to privilege escalation.

VendorProductVersions

MegaTec Taiwan

ClientMate

affected
6.2.2

Weaknesses (CWE)

CWE-428

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now