CVE-2026-36574 Details

A DLL hijacking vulnerability has been identified in Wassimulator CactusViewer version 2.3.0. This vulnerability allows attackers to escalate privileges and execute arbitrary code by placing a malicious DLL in the same directory as the CactusViewer executable. When the application is launched, it loads the malicious DLL, leading to unauthorized code execution in the context of the user running the application.

Users can be advised to avoid placing CactusViewer in directories where malicious DLLs could be easily introduced, such as shared or multi-user writable locations. However, a more effective remediation would involve updating the application to change how DLLs are loaded, ensuring they are only sourced from secure, trusted locations.