Security readout for executives and security teams
Plain-English summary
This flaw affects Fujitsu Security Solution AuthConductor Client Basic V2 on Windows. A user who can already log in to a system with the affected software may gain SYSTEM-level control or alter registry values. This is serious for managed endpoints because local low-privilege access could become full device compromise.
Executive priority
Treat this as a high-priority endpoint remediation item if the product is deployed. It is not described as remotely exploitable, but a foothold on a user account could become full system control. Prioritize shared, high-value, or broadly accessible Windows systems first.
Technical view
CVE-2026-20893 is an origin validation error, mapped to CWE-346, in AuthConductor Client Basic V2 2.0.25.0 and earlier. The CVSS 4.0 score is 8.5 high, with local attack vector, low complexity, low privileges required, and no user interaction. Impact is high for confidentiality, integrity, and availability on the vulnerable system.
Likely exposure
Exposure is limited to Windows systems where Fujitsu Security Solution AuthConductor Client Basic V2 2.0.25.0 or earlier is installed. The attacker must be able to log in locally or otherwise obtain a Windows account on that system.
Exploitation context
The provided sources do not report active exploitation, and the CVE is not listed as KEV in the supplied data. Exploitation requires authenticated local access, so risk is highest on shared workstations, compromised endpoints, or environments where standard users can access affected systems.
Researcher notes
The available record identifies the weakness class and impact but does not include exploit details or confirmed exploit activity. Validation should focus on version presence, local privilege boundaries, and vendor advisory guidance. Do not assume affected products beyond AuthConductor Client Basic V2 2.0.25.0 and earlier.
Mitigation direction
- Inventory Windows endpoints for AuthConductor Client Basic V2 installations.
- Prioritize systems running version 2.0.25.0 or earlier.
- Review Fujitsu and JVN advisories for the supported update or workaround.
- Restrict local login access to affected endpoints where feasible.
- Monitor affected systems for suspicious privilege escalation or registry changes.
Validation and detection
- Confirm installed product name and version on Windows endpoints.
- Compare installed versions against 2.0.25.0 and earlier.
- Verify whether vendor-recommended remediation has been applied.
- Check endpoint logs for unexpected SYSTEM-level process activity.
- Document systems where remediation is delayed or unavailable.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-346: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupExecution behavior lookup
The CVE wording references code or command execution, so execution technique review may help defensive triage. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2026-20893 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 8.5 (4.0)
- Known Exploited
- No
- Published
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N——Primary CVE scoreVulnerability scoring details
Base CVSS 4.0 score
8.5HighVector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source materials
- CVE List V5 sourceCVE List V5
- https://www.fmworld.net/biz/common/info/202601acc/CVE reference
- https://jvn.jp/en/jp/JVN24626628/CVE reference
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Origin Validation Error
Origin Validation Error represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.