Multiple vulnerabilities in RSUPPORT RemoteCall Remote Support Program (for Operator) and RemoteView PC Application Console
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 2 |
| CVE-ID | CVE-2025-26859 CVE-2025-26860 |
| CWE-ID | CWE-427 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software |
RemoteView PC Application Console Other software / Other software solutions RemoteCall Remote Support Program (for Operator) Other software / Other software solutions |
| Vendor | RSUPPORT |
Security Bulletin
This security bulletin contains information about 2 vulnerabilities.
1) Insecure DLL loading
EUVDB-ID: #VU117329
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2025-26859
CWE-ID:
CWE-427 - Uncontrolled Search Path Element
Exploit availability: No
DescriptionThe vulnerability allows a local attacker to compromise vulnerable system.
The vulnerability exists due to uncontrolled search path element. A local attacker can place a specially crafted .dll file and execute arbitrary code on the target system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsRemoteView PC Application Console: before 6.0.2
CPE2.3 External linkshttps://jvn.jp/en/jp/JVN22713803/index.html
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Insecure DLL loading
EUVDB-ID: #VU117330
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2025-26860
CWE-ID:
CWE-427 - Uncontrolled Search Path Element
Exploit availability: No
DescriptionThe vulnerability allows a local attacker to compromise vulnerable system.
The vulnerability exists due to uncontrolled search path element. A local attacker can place a specially crafted .dll file and execute arbitrary code on the target system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsRemoteCall Remote Support Program (for Operator): before 5.1.0
CPE2.3 External linkshttps://jvn.jp/en/jp/JVN22713803/index.html
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
