Is CVE-2026-66839 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-66839?

CVE-2026-66839 has a CVSS v3 severity of MEDIUM (6.7).

Back

CVE-2026-66839

Description

NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path or Element vulnerability (CWE-428). An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges.