CVE-2026-66839

Name of the Vulnerable Software and Affected Versions NetKids iMark (affected versions not specified)

Description An authenticated attacker can exploit an Unquoted Search Path or Element issue to execute arbitrary code with SYSTEM privileges. An Unquoted Search Path occurs when a service or application uses a file path containing spaces without enclosing it in quotes, potentially allowing a malicious actor to place a fake executable in the path to be executed instead of the intended one.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.