PatchTheCVECVE-2026-27748: Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component
CVE-2026-27748 is a high-severity flaw (CVSS 7.8) affecting internet security. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component. During the update process, a privileged service running as SYSTEM deletes a file under C:\\ProgramData without validating whether the path resolves through a symbolic link or reparse point. A local attacker can create a malicious link to redirect the delete operation to an arbitrary file, resulting in deletion of attacker-chosen files wit
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.8 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.2% (top 92%) |
| CISA exploited list | No |
| Weakness | CWE-59 |
| Published | 2026-03-05 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-27748?
internet security: upgrade to 1.1.114.3113. Exact commands for each OS are on this page.
Is CVE-2026-27748 being exploited?
CVE-2026-27748 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-27748 affect?
CVE-2026-27748 affects internet security. Severity is high (CVSS 7.8). Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component. During the update process, a privileged service running as SYSTEM deletes a file under C:\\ProgramData without validating whether
How urgent is CVE-2026-27748?
Priority 29/100. High severity
Related CVEs
- CVE-2025-7073 HIGH 7.8 UPGRADE UPGRADE A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows
- CVE-2026-6851 HIGH 7.0 UPGRADE UPGRADE An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as
- CVE-2026-27750 HIGH 7.8 UPGRADE Avira Internet Security contains a time-of-check time-of-use (TOCTOU) vulnerability in the Optimizer component
- CVE-2026-27749 HIGH 7.8 UPGRADE Avira Internet Security contains a deserialization of untrusted data vulnerability in the System Speedup compo
- CVE-2025-7098 MEDIUM 5.6 DOWNGRADE A vulnerability, which was classified as critical, was found in Comodo Internet Security Premium 12.3.4.8162