CVE-2026-66839

MediumCVSS 6.7

Published: 05/08/2026(UTC)Updated: 24/10/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path or Element vulnerability (CWE-428). An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges.

Risk Assessment

An authenticated attacker can gain full control of the system, potentially leading to complete compromise of confidentiality, integrity, and availability.

Recommendation

Install the patch provided by the vendor. Ensure installation paths do not contain spaces or properly quote paths in configuration.

Other vulnerabilities in NetKids iMark

CVE-2026-66344Medium
NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Uncontrolled Search Path Element vulnerability (CWE-427). An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS