Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-66839 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path or Element vulnerability (CWE-428). An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges.

Metrics

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://jvn.jp/en/jp/JVN28045338/ [email protected]AdvisoryBundleRemedy
https://www.istinc.co.jp/dl/jpc/DLL%E3%83%95%E3%82%A1%E3%82%A4%E3%83%AB%E3%81%AE%E8%AA%AD%E3%81%BF%E8%BE%BC%E3%81%BF%E3%81%8A%E3%82%88%E3%81%B3%E3%82%A4%E3%83%B3%E3%82%B9%E3%83%88%E3%83%BC%E3%83%AB%E3%83%95%E3%82%A9%E3%83%AB%E3%83%80%E3%81%AE%E3%82%A2%E3%82%AF%E3%82%BB%E3%82%B9%E6%A8%A9%E9%99%90%E3%81%AB%E9%96%A2%E3%81%99%E3%82%8B%E5%95%8F%E9%A1%8C%E3%81%A8%E5%AF%BE%E5%BF%9C.pdf [email protected]RemedyVendor
https://www.istinc.co.jp/dl/jpc/%E3%82%B5%E3%83%BC%E3%83%93%E3%82%B9%E3%81%AE%E5%AE%9F%E8%A1%8C%E3%83%95%E3%82%A1%E3%82%A4%E3%83%AB%E3%83%91%E3%82%B9%E3%81%8C%E5%BC%95%E7%94%A8%E7%AC%A6%E3%81%A7%E5%9B%B2%E3%81%BE%E3%82%8C%E3%81%A6%E3%81%84%E3%81%AA%E3%81%84%E3%81%93%E3%81%A8%E3%81%AB%E3%82%88%E3%82%8B%E6%A8%A9%E9%99%90%E6%98%87%E6%A0%BC%E3%81%AE%E5%95%8F%E9%A1%8C%E3%81%A8%E5%AF%BE%E5%BF%9C.pdf [email protected]RemedyVendor

Weakness Enumeration

CWE-IDCWE NameSource
CWE-428Unquoted Search Path or Element[email protected]

Affected Products

ProductVersions
Integrated Systems Technologies NetKids iMark
<= V5.2.5.0

CPE

  • No CPEs found in CPE dictionary for this product.

Remediation

  • Workaround:moderate efforthttps://www.istinc.co.jp/dl/jpc/サービスの実行ファイルパスが引用符で囲まれていないことによる権限昇格の問題と対応.pdf

    To mitigate the vulnerability, configure the executable path of the nkmsgService to be enclosed in quotes. Follow these steps: 1. Terminate the following programs and stop the associated services: - NetKids Notification Console (nkmsgClient.exe) - iMarkGUI (nkiMarkClient.exe) - nkmsgService - nkimarkService_V5 2. Enclose the executable path of the nkmsgService in quotes: - Registry Method: 1. Open the registry editor and navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nkmsgService. 2. Modify the ImagePath value to "C:\Program Files\Netkids\iMarkV5\nkmsg\nkmsgService.exe". - Command Prompt Method: 1. Open Command Prompt as an administrator. 2. Execute the command: sc config nkmsgService binPath= "\"C:\Program Files\Netkids\iMarkV5\nkmsg\nkmsgService.exe\"" 3. Verify that the executable path is enclosed in quotes by checking the properties of the nkmsgService in Windows Services. 4. Restart the nkmsgService and nkimarkService_V5 services. 5. Launch the NetKids Notification Console (nkmsgClient.exe) and iMarkGUI (nkiMarkClient.exe). 6. Confirm that notifications are functioning correctly.

Change History

2 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-66839
NVD Published Date:
Aug 5, 2026
NVD Last Modified:
Aug 28, 2026
Source:
[email protected]
CVE-2026-66839 Details - Not Deferred