Gv Edge Recording Manager CVE-2026-4606

Local user access required on Windows system running GV Edge Recording Manager (ERM) v2.3.1. Attacker launches ERM application or uses features like 'Import Data' file dialog, which execute with LocalSystem privileges. No remote exploitation possible. No victim interaction needed beyond normal application usage.

This vulnerability presents critical real-world risk despite the absence of a CVSS vector and EPSS score in the available data. The attack vector is Local (AV:L) with Low complexity (AC:L) and requires no privileges (PR:N), making exploitation trivial for any user with local access to the system. The technical impact is complete system compromise (full SYSTEM-level code execution). The lack of KEV status or public POC information does not diminish the risk; the vulnerability is straightforward to exploit given the clear attack surface (any ERM file dialog operation). The SSVC decision framework would classify this as exploitable with high automatability and total impact, warranting immediate patching. Organizations running GV ERM should treat this as a critical local privilege escalation requiring urgent remediation, as it bypasses Windows security boundaries and cannot be mitigated through network controls alone.

A non-administrative local user with access to a Windows system running GV ERM v2.3.1 launches the application and invokes the 'Import Data' function, which triggers a file dialog running with SYSTEM privileges. The attacker navigates to a protected system directory (e.g., C:\Windows\System32) and modifies a critical system file such as a driver or configuration file, or deletes system components to cause a denial of service. Alternatively, the attacker copies a malicious executable to a system-protected location that is included in the system PATH or startup sequence, ensuring privilege-escalated code execution on the next system boot or process invocation. No specialized tools or advanced techniques are required; the vulnerability is exploitable through normal ERM UI interactions.