ESET PROTECT Vulnerability Allows Adjacent Network Information Disclosure

CERT-Bund published advisory WID-SEC-2026-0926 detailing a vulnerability in ESET PROTECT on-prem, a management console for ESET security products. The flaw has a CVSS Base Score of 4.3 (medium) and CVSS Temporal Score of 4.0 (medium), with remote attack capability confirmed. Attackers on adjacent networks can exploit this vulnerability to disclose information. No mitigation measures are currently available from the vendor.

Organizations using ESET PROTECT on-prem should monitor ESET for security patches and apply compensating controls such as network segmentation to limit exposure from adjacent network attackers. Given the absence of vendor-provided mitigations, affected entities should assess risk exposure and implement defensive measures based on their security posture requirements.