{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2026-30266", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2026-04-20T17:25:38.552Z", "dateReserved": "2026-03-04T00:00:00.000Z", "datePublished": "2026-04-20T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-04-20T16:59:46.033Z"}, "descriptions": [{"lang": "en", "value": "Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.7 and before allows a local attacker to execute arbitrary code via a crafted file"}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "http://deepcool.com"}, {"url": "http://deepcreative.com"}, {"url": "https://github.com/uncle-hash/vulnerability-research/tree/main/CVE-2026-30266"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-277", "lang": "en", "description": "CWE-277 Insecure Inherited Permissions"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-04-20T17:25:33.172119Z", "id": "CVE-2026-30266", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-20T17:25:38.552Z"}}]}, "dataVersion": "5.2"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-30266", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-20T17:25:33.172119Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-277", "description": "CWE-277 Insecure Inherited Permissions"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-20T17:25:26.918Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "http://deepcool.com"}, {"url": "http://deepcreative.com"}, {"url": "https://github.com/uncle-hash/vulnerability-research/tree/main/CVE-2026-30266"}], "descriptions": [{"lang": "en", "value": "Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.7 and before allows a local attacker to execute arbitrary code via a crafted file"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-04-20T16:59:46.033Z"}}}, "cveMetadata": {"cveId": "CVE-2026-30266", "state": "PUBLISHED", "dateUpdated": "2026-04-20T17:25:38.552Z", "dateReserved": "2026-03-04T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2026-04-20T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.2"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.7 and before allows a local attacker to execute arbitrary code via a crafted file"}], "id": "CVE-2026-30266", "lastModified": "2026-04-20T19:05:30.750", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2026-04-20T17:16:33.377", "references": [{"source": "cve@mitre.org", "url": "http://deepcool.com"}, {"source": "cve@mitre.org", "url": "http://deepcreative.com"}, {"source": "cve@mitre.org", "url": "https://github.com/uncle-hash/vulnerability-research/tree/main/CVE-2026-30266"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-277"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-20T18:41:48.160149+00:00", "value": {"mitigation_remediation": ["Update DeepCool DeepCreative to a version that fixes the insecure permission handling (e.g., version 1.2.8 or later).", "Reconfigure the file system permissions for DeepCreative directories so that only the application process can read and execute files; set directories to mode 750 or stricter.", "Restrict local users from creating or modifying files in the DeepCreative installation directory, and enforce strict access controls on any directory that the application scans for configuration or executable files."], "summary": {"action": "Patch Now", "impact": "Local Arbitrary Code Execution via insecure permissions"}, "threat_synthesis": {"affected_systems": "The affected product is DeepCool DeepCreative, versions 1.2.7 and earlier. No other vendors or products are listed in the CNA data.", "description_and_impact": "The vulnerability allows a local attacker who can place a crafted file on the system to trigger execution of arbitrary code by exploiting insecure file permissions. Because the attacker can control the file\u2019s content and the system will execute it, they can gain unauthorized control over the affected application and potentially the underlying OS. The impact is full compromise of the compromised host\u2019s confidentiality, integrity, and availability.", "risk_and_exploitability": "The EPSS score is not available and the vulnerability is not listed in CISA's KEV catalog, but local code execution is a very high\u2011risk condition. If the attacker can write files into a directory monitored by DeepCreative, they can execute arbitrary code without additional authentication. The exploitation likelihood is high for systems where the application runs with elevated privileges or unsegmented file permissions. Given the lack of an official patch reference, administrators should assume the risk remains elevated until a vendor update is applied."}}}}, "created": "2026-04-20T18:45:14.230514+00:00", "updated": "2026-04-20T18:45:14.230523+00:00", "vendors": []}