Home

Description

The installer of M-Track Duo HD version 1.0.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrator privileges.

PUBLISHED Reserved 2026-02-05 | Published 2026-02-12 | Updated 2026-02-12 | Assigner jpcert




HIGH: 7.8CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

HIGH: 7.1CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Problem types

Uncontrolled Search Path Element

Product status

1.0.0
affected

References

www.m-audio.com/audio-midi-interfaces/m-track-duo-hd.html

jvn.jp/en/jp/JVN88690363/

cve.org (CVE-2026-25676)

nvd.nist.gov (CVE-2026-25676)

Download JSON