CVE-2026-4869— Potential Privilege Escalation in InstallShield
Quick assessment
Affected
Flexera InstallShield
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 InstallShield 2025 R2 及更早版本中，当从不安全的位置运行带有前置条件（Prerequisites）的压缩 Basic MSI 安装程序时，发现了一个潜在的权限提升漏洞。如果本地管理员从不安全的位置启动带有前置条件的压缩版 Setup.exe，前置条件安装程序也可能从相同的不安全位置加载，从而可能导致权限提升。
Possible ATT&CK Techniques 2 AI
T1068 · Exploitation for Privilege Escalation T1548.003 · Sudo and Sudo CachingAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Flexera | InstallShield | ≤ 2025 R2 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-4869
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Potential Privilege Escalation in InstallShield
Source: CVE Program / CVE List V5
Vulnerability Description
A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compressed Basic MSI setup with Prerequisites from an insecure location. If a local administrator launches a compressed Setup.exe with Prerequisites from an unsecured location, the Prerequisite installers also might load from an unsecured location, potentially leading to privilege escalation.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
不可信的搜索路径
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Flexera | InstallShield | 0 ~ 2025 R2 | - |
|
II. Public POCs for CVE-2026-4869
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-4869
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-4869 (1)
IV. Related Vulnerabilities
Same product: InstallShield
-
CVE-2025-12418
Potential Denial of Service in Supported Versions of Revener -
CVE-2024-14012
Potential Privilege Escalation in Revenera InstallShield 202 -
CVE-2024-7562
Flexera InstallShield 安全漏洞 -
CVE-2023-29080
Privilege escalation in InstallShield -
CVE-2023-29081
InstallShield Symlink Vulnerability Affecting Suite Project
Same vendor: Flexera
-
CVE-2026-19572
FlexNet Publisher lmadmin SOAP Authentication Bypass Vulnera -
CVE-2026-4027
FlexNet Manager Suite Attachment File Disclosure -
CVE-2026-4026
FlexNet Manager Suite Privilege Escalation Vulnerability -
CVE-2021-41528
Improper authorization related to Import / Export interfaces -
CVE-2021-41527
2FA bypass on the RISC Platform
Same weakness: CWE-426
-
CVE-2026-0315
GlobalProtect App: Local Privilege Escalation Vulnerability -
CVE-2026-103847
Dimension | Untrusted Search Path (CWE-426) -
CVE-2026-83509
Windows Setup Files Cleanup Elevation of Privilege Vulnerabi -
CVE-2026-83506
Servicing Stack Updates Elevation of Privilege Vulnerability -
CVE-2026-69733
Windows Update Elevation of Privilege Vulnerability
V. Comments for CVE-2026-4869
No comments yet