Medium severity · published Jun 16, 2026
CVE-2026-50255
Incorrect default permissions issue exists in Optical Disc Archive Software for Windows 5.5.3 and earlier
6.7
CVSS
0.1%
EPSS
No
On KEV
Description
Incorrect default permissions issue exists in Optical Disc Archive Software for Windows 5.5.3 and earlier. If this vulnerability is exploited, arbitrary code may be executed with SYSTEM privileges.
CVSS vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 0% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OD
Optical Disc Archive Software for Windows · Sony Corporation
5.5.3 and earlier · source: vendor
Affected product
OD
Optical Disc Archive Software for Windows
Sony Corporation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-50255
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-50255
jvn.jp
https://jvn.jp/en/jp/JVN79926428/
www.sony.com
https://www.sony.com/electronics/support/software/00403421
More from Optical Disc Archive Software for Windows
6.7
CVE-2025-62225
Optical Disc Archive Software provided by Sony Corporation registers a Windows service with an unquoted file path