Pyrus CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review Pyrus CVE published 2026-10-26

CVE-2026-116596

CVE-2026-116596 is a local privilege escalation vulnerability in Pyrus Sync for Windows. The vulnerability is caused by missing authorization controls in the PyrusSyncService Windows service, allowing an attacker with unprivileged access to create files using the ISyncService contract. This could lead to unauthorized file creation and potentially allow an attacker to gain elevated privileges on the system [truncated]