{"id":"CVE-2026-77827","title":"Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\\ProgramData\\Maono'","summary":"Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\\ProgramData\\Maono'. Fixed in 4.0.80.","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-428"],"vendor":"Maono","product":"Maono Link","affected":["link >= 3.8.13 < 4.0.80"],"published":"2026-09-08","updated":"2026-09-14","sourceUpdated":"2026-09-14T17:17:51.273","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-77827","references":[{"url":"https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-251-01.json","label":"9119a7d8-5eab-497f-8521-727c672e3725"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-77827","label":"9119a7d8-5eab-497f-8521-727c672e3725"},{"url":"https://www.maono.com/products/maono-link-software","label":"9119a7d8-5eab-497f-8521-727c672e3725"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"total","timestamp":"2026-09-14T16:58:03.913265Z"},"epss":0.00166,"epssPercentile":0.06267,"ingestedAt":"2026-09-08T21:11:12.372Z","slug":"CVE-2026-77827","body":"## Overview\n\nMaono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\\ProgramData\\Maono'. Fixed in 4.0.80.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":51,"depthScoreParts":{"impact":39.1,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[{"seq":203056,"id":"CVE-2026-77827","ts":1789409571911,"field":"exploit_available","old":"false","new":"true"}]}