CVE-2026-30266

CVE-2026-30266 is an insecure permissions vulnerability affecting DeepCool DeepCreative version 1.2.12 and earlier, which allows local attackers to execute arbitrary code through a specially crafted file. The vulnerability carries a HIGH severity rating with a CVSS score of 7.8, featuring a local attack vector with low complexity and no required privileges, resulting in high confidentiality, integrity, and availability impact. The exploit requires user interaction but can be executed without elevated permissions. Currently, there is no evidence of active exploitation in the wild, and the vulnerability is not listed on any public exploit databases or CISA's known exploited vulnerabilities catalog. The EPSS score indicates relatively low probability of exploitation compared to other CVEs, and the vulnerability remains inactive on public threat lists, suggesting limited community attention at this time.