CVE-2026-116596 | BDVDB-2026-396100 Detail

PyrusPyrus Sync

Description#

Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISyncService contract.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-266 Incorrect Privilege Assignment

References#

https://pyrus.com/en/pyrus-sync
https://medium.com/@alisaifeldin/cve-2026-116596-local-privilege-escalation-in-pyrus-sync-for-windows-0fe2417dc8cf

Exploit#

No public exploit known

History#

Version 12026-10-26Record published in the CVE List.