CVE-2026-27653

The installers for multiple products provided by Soliton Systems K.K. contain an issue with incorrect default permissions, which may allow arbitrary code to be executed with SYSTEM privileges.

Score

CVSS 3.1 6.7 Medium

Status

Analyzed - vultures@jpcert.or.jp

Published

2026-02-27

Last modified

2026-02-27

Weaknesses

CWE-276, CWE-863

Affected products

• Securebrowser For Onegate (Soliton)
• Securebrowser Ii (Soliton)
• Secureworkspace (Soliton)
• Soliton Securebrowser For Onegate (Soliton Systems K.k.)
• Soliton Securebrowser Ii (Soliton Systems K.k.)
• Soliton Secureworkspace Formerly Wrappingbox (Soliton Systems K.k.)

References

• https://jvn.jp/en/jp/JVN41357120/
• https://www.soliton.co.jp/support/2026/006679.html