Is CVE-2026-66344 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-66344?

CVE-2026-66344 has a CVSS v3 severity of MEDIUM (6.7).

Back

CVE-2026-66344

Description

NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Uncontrolled Search Path Element vulnerability (CWE-427). An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges.