CyberSecBulletin

MegaTec Taiwan vulnerabilities

We track 3 vulnerabilities in MegaTec Taiwan products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 26, 2025.

3vulnerabilities
1critical
2high
0exploited
7.9average CVSS score

Latest MegaTec Taiwan vulnerabilities

  • 7.1 High severity

    UPSilon2000V6.0: Unquoted Search Path or Element

    CVE-2025-66269MegaTec Taiwan

    The RupsMon and USBMate services in UPSilon 2000 run with SYSTEM privileges and contain unquoted service paths. This allows a local attacker to perform path interception and escalate privileges if they have write permissions to the directories proceeding that

  • 9.3 Critical severity

    UPSilon2000V6.0: Improper Privilege Management

    CVE-2025-66266MegaTec Taiwan

    The RupsMon.exe service executable in UPSilon 2000 has insecure permissions, allowing the 'Everyone' group Full Control. A local attacker can replace the executable with a malicious binary to execute code with SYSTEM privileges or simply change the config path

  • 7.2 High severity

    ClientMate: Unquoted Search Path or Element

    CVE-2025-66264MegaTec Taiwan

    The CMService.exe service runs with SYSTEM privileges and contains an unquoted service path. This allows a local attacker with write privileges to the filesystem to insert a malicious executable in the path, leading to privilege escalation.