Published:2026/01/07  Last Updated:2026/01/07

JVN#24626628
Origin validation error vulnerability in Fujitsu Security Solution AuthConductor Client Basic V2

Overview

Fujitsu Security Solution AuthConductor Client Basic V2 provided by Fujitsu Client Computing Limited contains an origin validation error vulnerability.

Products Affected

  • Fujitsu Security Solution AuthConductor Client Basic V2 versions 2.0.25.0 and earlier

Description

Fujitsu Security Solution AuthConductor Client Basic V2 provided by Fujitsu Client Computing Limited contains the following vulnerability.

  • Origin validation error (CWE-346)
    • CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Base Score 8.5
    • CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Base Score 7.8
    • CVE-2026-20893

Impact

An attacker who can log in to the Windows system where the affected product is installed may execute arbitrary code with SYSTEM privilege and/or modify the registry value.

Solution

Update the software
Update the software to the latest version according to the information provided by the developer.

Vendor Status

Vendor Status Last Update Vendor Notes
Fujitsu Client Computing Limited Vulnerable 2026/01/07 Fujitsu Client Computing Limited website

References

JPCERT/CC Addendum

Vulnerability Analysis by JPCERT/CC

Credit

MASAHIRO IIDA of LAC Co., Ltd. reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Other Information

JPCERT Alert
JPCERT Reports
CERT Advisory
CPNI Advisory
TRnotes
CVE CVE-2026-20893
JVN iPedia JVNDB-2026-000001