CVE-2026-114594 | BDVDB-2026-402234 Detail

Description#

A time-of-check to time-of-use (TOCTOU) race condition in the Sandisk Dashboard installer allows a local, authenticated standard user to replace an installer-staged binary in a user-writable temporary directory between validation and execution. The elevated installer then executes the attacker-controlled binary, resulting in local privilege escalation to a high-integrity (administrative) context. This issue affects Sandisk Dashboard through 5.2.2.3.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-11-09Record published in the CVE List.