Remote Code Execution in OriginLab Origin Viewer (CVE‑2026‑114559) Allows Arbitrary Code via Malicious OGG Files
What It Is — The Zero Day Initiative advisory (ZDI‑26‑876) details a remote code execution (RCE) flaw in OriginLab’s Origin Viewer. The vulnerability (CVE‑2026‑114559) resides in the OGG file parser, where insufficient validation of user‑supplied data can cause an out‑of‑bounds write. An attacker who convinces a victim to open a crafted OGG file or visit a malicious page can execute arbitrary code in the context of the viewer process. The CVSS v3.1 base score is 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). OriginLab has released a patch; users are urged to upgrade.
Affected Products — OriginLab Origin Viewer (all versions prior to the November 2026 security update).
Why It Matters for Trust & Control Assurance — This incident underscores the need for a robust vulnerability‑management control that ensures timely patching and verification of input‑validation safeguards.
Recommended Actions —
- Deploy OriginLab’s November 2026 update immediately.
- Verify the installed version across all endpoints using your asset inventory.
- Enable logging of file‑open events for Origin Viewer and monitor for anomalous activity.
- Incorporate the patch‑status check into your continuous compliance evidence collection.
Source: Zero Day Initiative Advisory