> ## Content Index
> Fetch the complete content index at: https://www.cyberdelegate.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Critical RCE Flaws Discovered in NEC WebSAM WinShare for Windows
- URL: https://www.cyberdelegate.com/critical-rce-flaws-discovered-in-nec-websam-winshare-for-windows/
- Published: 2026-11-13T19:31:59.000Z
- Updated: 2026-11-13T19:31:58.000Z
- Description: NEC warns of two critical remote code execution bugs in WebSAM WinShare that let attackers gain SYSTEM rights; admins must patch or mitigate immediately.
- Author: The CyberDiplomat
- Tags: Vulnerabilities & Patches, East Asia & Pacific, NEC, WebSAM, WinShare, CVE-2026-113363, CVE-2026-113364, Remote Code Execution, security advisory, #crawler

NEC has disclosed two critical remote‑code‑execution (RCE) vulnerabilities – CVE‑2026‑113363 and CVE‑2026‑113364 – affecting its WebSAM WinShare product for Windows. Both flaws allow unauthenticated attackers to execute commands with SYSTEM privileges, posing a severe risk to any organization that runs the software.

## Technical details

The first issue stems from improper input validation in the handling of network packets, while the second is a buffer‑overflow in the data‑receiving process. Each defect can be triggered remotely without authentication, granting the attacker full control over the host system.

Both CVEs carry a CVSS v4.0 base score of 9.3 and a CVSS v3.0 score of 9.8, classifying them as critical. The vulnerabilities affect WebSAM WinShare versions 7.2.0‑7.5.0, 7.6.0, and 7.7.0‑7.7.2 running on Windows.

## Timeline

- 2026‑11‑09 – NEC publishes a security advisory listing the three flaws (including CVE‑2026‑113362, CVE‑2026‑113363, CVE‑2026‑113364).
- 2026‑11‑13 – Security NEXT reports on the advisory.

## Impact and who is affected

Any organization or user operating the listed WebSAM WinShare versions on Windows is potentially exposed. The advisory does not disclose how many installations are affected, nor does it confirm active exploitation.

## What IT and security teams should do

NEC has released fix modules for WinShare 7.6 and 7.7, which can also be applied to 7.5.0 and earlier, through its support portal (login required). Administrators should apply them as soon as possible. Until then, limit network exposure of WinShare hosts, apply strict firewall rules to block unnecessary inbound traffic, and ensure that only trusted hosts can communicate with the service. Review system logs for anomalous activity that could indicate exploitation attempts.

## Advice for end users

Ordinary users should be aware that compromised corporate systems could be leveraged for broader attacks; keep personal devices updated and avoid connecting to untrusted corporate networks.

### Sources

- [CVE-2026-113363 (NVD)](https://nvd.nist.gov/vuln/detail/CVE-2026-113363?ref=cyberdelegate.com)
- [CVE-2026-113364 (NVD)](https://nvd.nist.gov/vuln/detail/CVE-2026-113364?ref=cyberdelegate.com)
- [Security NEXT](https://www.security-next.com/192718?ref=cyberdelegate.com)

*This brief was prepared with AI assistance from the sources above and reviewed by our editors.*