Medium severity · published Feb 27, 2026
CVE-2026-27653
The installers for multiple products provided by Soliton Systems K.K
6.7
CVSS
0.1%
EPSS
No
On KEV
Description
The installers for multiple products provided by Soliton Systems K.K. contain an issue with incorrect default permissions, which may allow arbitrary code to be executed with SYSTEM privileges.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
Soliton SecureBrowser II · Soliton Systems K.K.
V2.0.0 to V2.0.14 · source: vendor
SS
Soliton SecureBrowser for OneGate · Soliton Systems K.K.
V1.0.0 · source: vendor
SS
Soliton SecureWorkspace (formerly WrappingBox) · Soliton Systems K.K.
V1.0.0 to V1.4.7 · source: vendor
SF
Securebrowser For Onegate · Soliton
1.0.0 · source: NVD
SI
Securebrowser II · Soliton
2.0.0 before 2.0.15 · source: NVD
SE
Secureworkspace · Soliton
1.0.0 before 1.4.8 · source: NVD
Affected product
SS
Soliton SecureBrowser for OneGate
Soliton Systems K.K.