{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2026-30266", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2026-04-23T13:40:34.695Z", "dateReserved": "2026-03-04T00:00:00.000Z", "datePublished": "2026-04-20T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-04-23T13:40:34.695Z"}, "descriptions": [{"lang": "en", "value": "Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.12 and before allows a local attacker to execute arbitrary code via a crafted file"}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "http://deepcool.com"}, {"url": "http://deepcreative.com"}, {"url": "https://github.com/uncle-hash/vulnerability-research/tree/main/CVE-2026-30266"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-277", "lang": "en", "description": "CWE-277 Insecure Inherited Permissions"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-04-20T17:25:33.172119Z", "id": "CVE-2026-30266", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-20T17:25:38.552Z"}}]}, "dataVersion": "5.2"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-30266", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-20T17:25:33.172119Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-277", "description": "CWE-277 Insecure Inherited Permissions"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-20T17:25:26.918Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "http://deepcool.com"}, {"url": "http://deepcreative.com"}, {"url": "https://github.com/uncle-hash/vulnerability-research/tree/main/CVE-2026-30266"}], "descriptions": [{"lang": "en", "value": "Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.12 and before allows a local attacker to execute arbitrary code via a crafted file"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-04-23T13:40:34.695Z"}}}, "cveMetadata": {"cveId": "CVE-2026-30266", "state": "PUBLISHED", "dateUpdated": "2026-04-23T13:40:34.695Z", "dateReserved": "2026-03-04T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2026-04-20T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.2"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:deepcool:deepcreative:*:*:*:*:*:*:*:*", "matchCriteriaId": "885B582B-F47D-4A5D-96A7-9E4F94FA4AA3", "versionEndExcluding": "1.2.12", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.12 and before allows a local attacker to execute arbitrary code via a crafted file"}], "id": "CVE-2026-30266", "lastModified": "2026-04-27T16:42:44.323", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2026-04-20T17:16:33.377", "references": [{"source": "cve@mitre.org", "tags": ["Product"], "url": "http://deepcool.com"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://deepcreative.com"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://github.com/uncle-hash/vulnerability-research/tree/main/CVE-2026-30266"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-277"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-20T20:45:04.338636+00:00", "value": {"mitigation_remediation": ["Update DeepCool DeepCreative to a version that fixes the insecure permission handling (e.g., version 1.2.8 or later).", "Reconfigure the file system permissions for DeepCreative directories so that only the application process can read and execute files; set directories to mode 750 or stricter.", "Restrict local users from creating or modifying files in the DeepCreative installation directory, and enforce strict access controls on any directory that the application scans for configuration or executable files."], "summary": {"action": "Patch Now", "impact": "Local Arbitrary Code Execution via insecure permissions"}, "threat_synthesis": {"affected_systems": "The affected product is DeepCool DeepCreative, versions 1.2.7 and earlier. No other vendors or products are listed in the CNA data.", "description_and_impact": "The vulnerability allows a local attacker who can place a crafted file on the system to trigger execution of arbitrary code by exploiting insecure file permissions. Because the attacker can control the file\u2019s content and the system will execute it, they can gain unauthorized control over the affected application and potentially the underlying OS. The impact is full compromise of the compromised host\u2019s confidentiality, integrity, and availability.", "risk_and_exploitability": "The CVSS score of 7.8 indicates a high severity, and the EPSS score is not available. Although it is not listed in CISA's KEV catalog, this local code execution vulnerability is a very high\u2011risk condition. If the attacker can write files into a directory monitored by DeepCreative, they can execute arbitrary code without additional authentication. The exploitation likelihood is high for systems where the application runs with elevated privileges or unsegmented file permissions, and administrators should assume the risk remains elevated until a vendor update is applied."}}}}, "created": "2026-04-20T18:45:14.230514+00:00", "title": "Local Arbitrary Code Execution via Insecure Permissions in DeepCool DeepCreative", "updated": "2026-04-20T20:45:16.926761+00:00", "vendors": []}