JVNDB-2026-011472

OMRON UPS (Uninterruptible Power Supply) management application may insecurely load Dynamic Link Libraries

The UPS (Uninterruptible Power Supply) management application provided by OMRON Corporation may insecurely load Dynamic Link Libraries due to an issue with uncontrolled search path element (CWE-427, CVE-2026-5397).

OMRON Corporation reported this vulnerability to JPCERT/CC to notify users of its solution through JVN.

OMRON SOCIAL SOLUTIONS Co.,Ltd.

• PowerAttendant Standard Edition (Windows Version) Ver.2.1.2 and earlier

Arbitrary code may be executed with the administrator privilege when the application is executed.

[Update the software]
Update the software to the latest version according to the information provided by the developer.

OMRON Corporation

• OMRON Corporation : Vulnerability Related to an Uncontrolled Search Path Element in a UPS Management Application

1. Uncontrolled Search Path Element(CWE-427) [Other]

1. CVE-2026-5397

1. JVN : JVNVU#94583735
2. JVN : JVNTA#91240916

• [2026/04/17]
    Web page was published