PT-2026-70982 · Parallels · Ras Client

CVE-2026-13121

·

Published

2026-08-11

·

Updated

2026-08-21

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Parallels RAS Client (affected versions not specified)
Description A local privilege escalation issue exists in the RAS RDP Backend Service due to an exposed dangerous function. An attacker who has already obtained the ability to execute low-privileged code on the target system can leverage this flaw to escalate their privileges and execute arbitrary code with SYSTEM level permissions.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-13121
ZDI-26-554

Affected Products

Ras Client