CVE-2026-114594
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Nov 09, 2026
Vendor
unknown
Description
A time-of-check to time-of-use (TOCTOU) race condition in the Sandisk Dashboard installer allows a local, authenticated standard user to replace an installer-staged binary in a user-writable temporary directory between validation and execution. The elevated installer then executes the attacker-controlled binary, resulting in local privilege escalation to a high-integrity (administrative) context. This issue affects Sandisk Dashboard through 5.2.2.3.