[ CVE-2026-75882 · Published 30 Oct 2026 ]

Vulnerability in ESET spol. s.r.o. ESET Endpoint Encryption

CVSS 8.5 EPSS <1%1 agency advisoryFix available

[ Description ]Official description

An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with standard user permissions access a device interface belonging to a privileged kernel driver and send specially crafted requests.

[ Fixes ]Fixes and patches

  • Security bulletin: ESET ca9033Vendor patch or bulletin · CERT-FR · support-feed.eset.com/link/15370/17510515/ca9033, cited by CERT-FR CERTFR-2026-AVI-1416

[ Advisories ]Government CERT advisories

  • CERT-FRCERTFR-2026-AVI-1416

    Vulnerability in ESET products Translated from French

    A vulnerability has been discovered in ESET products. It allows an attacker to cause a breach of data confidentiality, a breach of data integrity and a security policy bypass.

    CVE-2026-75882