CVE-2026-57895 Fuji Electric Co.,Ltd. CVE debrief

Who should care

Users of Pupsman versions prior to 3.9.0 should apply the patch to prevent arbitrary code execution. The vulnerability has a high impact on the affected systems, and users should review the official sources for the latest updates. The affected product, Pupsman, has a known issue with incorrect default permissions, which can be exploited by an attacker to execute arbitrary code with SYSTEM privilege.

Technical summary

The vulnerability exists due to incorrect default permissions in Pupsman versions prior to 3.9.0. This allows an attacker to place a malicious executable in the installation folder, leading to arbitrary code execution with SYSTEM privilege. The affected product, Pupsman, has a known issue with incorrect default permissions, which can be exploited by an attacker to execute arbitrary code with SYSTEM privilege. The vulnerability has a high impact on the affected systems, and users should apply the patch to prevent arbitrary code execution.

Defensive priority

High

Recommended defensive actions

• Apply the patch to update Pupsman to version 3.9.0 or later
• Restrict write access to the installation folder
• Monitor for suspicious activity in the installation folder
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record was published on 2026-07-08T06:16:22.900Z and has not been modified since then. The NVD entry is currently Received. The vulnerability details are based on the information available from the CVE record and NVD entry. However, the accuracy of this information is not verified, and defenders should review the official sources for the latest updates. The affected product, Pupsman, has a known issue with incorrect default permissions, which can be exploited by an attacker to execute arbitrary code with SYSTEM privilege.

Official resources