PatchTheCVECVE-2026-8993: D.Launcher 2 component of Slovak eID client ecosystem contains Improper URL Handler Processing vulnerability
CVE-2026-8993 is a medium-severity flaw (CVSS 6.5) affecting affected software. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
D.Launcher 2 component of Slovak eID client ecosystem contains Improper URL Handler Processing vulnerability. Application registers multiple custom URL handlers that could be exploited to initiate full NTLM autentication or SMB connection to attacker infrastructure and to conduct SSRF (Server Side Request Forgery) attacks. User interaction is required as potential victim needs to open a specially crafted URL.
Why this priority
- No elevated risk signals yet
No fix is published yet: follow the downgrade or mitigation steps.
Last updated 2026-07-22 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-8993?
No fixed release is listed yet. Watch the vendor advisory and apply any mitigation shown on this page.
Is CVE-2026-8993 being exploited?
CVE-2026-8993 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-8993 affect?
CVE-2026-8993 affects affected software. Severity is medium (CVSS 6.5). D.Launcher 2 component of Slovak eID client ecosystem contains Improper URL Handler Processing vulnerability. Application registers multiple custom URL handlers that could be exploited to initiate full NTLM autentication or SMB connection t
How urgent is CVE-2026-8993?
Priority 26/100. No elevated risk signals yet.