CVE-2026-8148 Privilege escalation in NAVER MYBOX Explorer

High 7.8 Published 8 May 2026 Updated 8 May 2026

A local attacker can escalate privileges to SYSTEM via registry manipulation in NAVER MYBOX Explorer for Windows.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2026-8148?

CVE-2026-8148 is a high-severity vulnerability in NAVER MYBOX Explorer, published on 8 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM via registry manipulation due to improper privilege checks.

Weakness: CWE-266

Which versions are affected by CVE-2026-8148?

It affects 1 product.

Products include Navercorp Mybox.

How do I fix CVE-2026-8148?

No fix has been published for CVE-2026-8148 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-8148 being exploited?

There is no known exploitation of CVE-2026-8148 in the wild and no public exploit code.

Sources

Also known as GHSA-9r2v-r8jf-9prp.