Netwrix Password Secure Vulnerabilities Allow Code Execution and DoS

CERT-Bund has published a security advisory (WID-SEC-2026-0793) concerning critical vulnerabilities in Netwrix Password Secure, specifically affecting versions prior to 26.3.100. These vulnerabilities, rated with a CVSS Base Score of 8.2, can be exploited by attackers to execute arbitrary code and perform denial-of-service (DoS) attacks on Windows systems. The advisory highlights the high severity of these issues.

Organizations using Netwrix Password Secure should immediately review their installed versions and apply available mitigations or updates to address these security risks. Failure to do so could lead to system compromise, data breaches, or service disruptions. While no remote attack vector is specified, the potential for code execution necessitates prompt action to secure affected systems and prevent potential exploitation.