CVE-2026-66344

MediumCVSS 6.7

Published: 05/08/2026(UTC)Updated: 24/10/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

6th percentile - higher than 6% of all known CVEs

Summary

NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Uncontrolled Search Path Element vulnerability (CWE-427). An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges.

Risk Assessment

The risk includes full system compromise by an authenticated attacker, potentially leading to data theft, malware installation, or total compromise.

Recommendation

Update NetKids iMark to a patched version and restrict user account privileges.

Other vulnerabilities in NetKids iMark

CVE-2026-66839Medium
NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path or Element vulnerability (CWE-428). An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS