{"vulnerability": "cve-2026-90493", "sightings": [{"uuid": "5d9b0178-deac-463f-a5bb-4f45f0861e89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90493", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117261849292005379", "content": "Tonec Internet Download Manager <=6.42.63 hit by CRITICAL vuln (CVE-2026-90493) in idmwfp.sys \u2014 improper access controls enable local privilege escalation. Public exploit code, no patch yet. Restrict local access & monitor. https://radar.offseq.com/threat/cve-2026-90493-improper-access-controls-in-tonec-internet-download-manager-a788ce95502ef3ad #OffSeq #CVE202690493 #Vuln #Cybersecurity", "creation_timestamp": "2026-09-13T04:30:24.442806Z"}, {"uuid": "2ce62d49-2248-49d1-9bee-68c4f3f124dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90493", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mver5fuiea24", "content": "CRITICAL vuln in Tonec Internet Download Manager <=6.42.63: Local attackers can escalate privileges via idmwfp.sys (CVE-2026-90493). Exploit code is public. No patch \u2014 limit local access & monitor. https://radar.offseq.com/threat/cve-2026-90493-improper-access-controls-in-tonec-internet-download-...", "creation_timestamp": "2026-09-13T04:30:26.069990Z"}, {"uuid": "7bc0732c-2ffa-4e02-8fd9-1c2a31db5a75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90493", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvestcstnp2m", "content": "\ud83d\udfe0 CVE-2026-90493 - High (8.8)\n\nA vulnerability was detected in Tonec Internet Download Manager up to 6.42 Build 63 on Windows. T...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-90493/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-13T05:00:36.788251Z"}]}