htc IPTInstaller vulnerabilities

Latest htc IPTInstaller CVEs

Newest publication first

1. CVE-2020-36933 IPTInstaller 4.0.9 - 'PassThru Service' Unquoted Service Path

   Published 2026-01-25

   High·CVSS 8.5 EPSS 0.17%

   HTC IPTInstaller 4.0.9 contains an unquoted service path vulnerability in the PassThru Service configuration. Attackers can exploit the unquoted binary path to inject and execute malicious code with elevated LocalSystem privileges.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.