CVE-2026-28704

CVE-2026-28704 is a DLL hijacking vulnerability in Emocheck that allows arbitrary code execution when a malicious DLL file is placed in the same directory as the application. The vulnerability exploits insecure DLL loading practices inherent to the Emocheck tool. The vulnerability carries a CVSS score of 7.8 (HIGH) with a local attack vector requiring no privileges but necessitating user interaction to trigger. An attacker with local access can execute code with the same privileges as the user running Emocheck, potentially compromising system integrity and confidentiality. The attack complexity is low, making it relatively straightforward to exploit. There is currently no evidence of active exploitation in the wild, as the vulnerability is not listed in the Known Exploited Vulnerabilities (KEV) catalog and remains inactive on threat intelligence hot lists. The EPSS score of 0.00014 indicates minimal community exploitation activity relative to other CVEs. However, the straightforward nature of the attack suggests organizations should still prioritize patching to eliminate this local privilege escalation pathway.