High severity · published Oct 30, 2026
CVE-2026-75882
Improper access control vulnerability in ESET Encryption products for Windows
New
8.5
CVSS
–
EPSS
No
On KEV
Description
An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with standard user permissions access a device interface belonging to a privileged kernel driver and send specially crafted requests.
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EE
ESET Endpoint Encryption · ESET spol. s.r.o.
through 5.4.23.0 · source: vendor
EF
ESET Full Disk Encryption · ESET spol. s.r.o.
through 2.4.4.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-75882
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-75882
support.eset.com
https://support.eset.com/en/ca9033-eset-customer-advisory-improper-access-control-vulnerability-in-eset-encryption-products-for-windows-fixed
More from ESET Endpoint Encryption
6.5
CVE-2022-2402
Stack Overflow in ESET Endpoint Encryption and ESET Full Disk Encryption for Windows