Cyber Resilience

CVE-2026-32679

High

Published: 23 April 2026

Published
23 April 2026
Modified
18 May 2026
KEV Added
—
Patch
—
CVSS Score v4 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0016 5.5th percentile
Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2026-32679 is a high-severity Uncontrolled Search Path Element (CWE-427) vulnerability in Liveon Canonnwcamplugin.Exe. Its CVSS base score is 8.4 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique DLL (T1574.001); ranked at the 5.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

OWASP Top 10 for Web (2025)

A08:2025 Software or Data Integrity Failures

EU & UK References

Vulnerability details

The installers of LiveOn Meet Client for Windows (Downloader5Installer.exe and Downloader5InstallerForAdmin.exe) and the installers of Canon Network Camera Plugin (CanonNWCamPlugin.exe and CanonNWCamPluginForAdmin.exe) insecurely load Dynamic Link Libraries (DLLs). If a malicious DLL is placed at the same directory, the affected…

more

installer may load that DLL and execute its code with the privilege of the user invoking the installer.

CWE(s)
CWE-427

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1574.001 DLL Stealth
Adversaries may abuse dynamic-link library files (DLLs) in order to achieve persistence, escalate privileges, and evade defenses.
attack.mitre.org →
Why these techniques?

CVE directly describes insecure DLL loading (CWE-427) in installers, enabling DLL Search Order Hijacking when a malicious DLL is placed in the same directory.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

Affected Assets

liveon
canonnwcamplugin.exe
1.0.0.0
liveon
canonnwcampluginforadmin.exe
1.0.0.0
liveon
downloader5installer.exe
1.0.0.0
liveon
downloader5installerforadmin.exe
1.0.0.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References