CVE-2026-18263

highCVSS 7.8covered by 1 sourcefirst seen 2026-08-20

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the RAS RDP Backend Service. The issue results from an exposed dangerous function. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-28886.

⚡ Watch CVE-2026-18263

Get an email if CVE-2026-18263 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all EPSS-scored CVEs.

Advisory coverage (1)

highCVE-2026-18263: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation…nvd · 2026-08-20

External references

NVD record for CVE-2026-18263

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-18263 status](https://www.csirts.com/badge/CVE-2026-18263)](https://www.csirts.com/cve/CVE-2026-18263)