{"id":"CVE-2026-76159","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-76159","summary":"Incorrect Permission Assignment for Critical Resource in the  configuration loader of Duplicati for Windows versions before v2.4.0.0 allows a local low-privileged attacker to escalate…","details":"Incorrect Permission Assignment for Critical Resource in the  configuration loader of Duplicati for Windows versions before v2.4.0.0 allows a local low-privileged attacker to escalate       privileges to NT AUTHORITY\\SYSTEM via an attacker-controlled preload.json file.","published":"2026-09-15T09:16:43.900","modified":"2026-09-15T09:16:43.900","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://zuso.ai/advisory/"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-09-15T09:16:43.900"}}