Findings

CVE-2026-33566

There is a cypher injection issue in LogonTracer prior to v2.0.0.

Published Apr 27, 2026 · updated Jun 17, 2026 · jpcert logontracer

There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be altered.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 27, 2026 · NIST NVD

    Detected

    There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be altered.

  2. Jun 17, 2026 · NIST NVD

    Updated

    There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be altered.

Affected

  • cpe jpcert/logontracerversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-33566

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-33566

    There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be altered.

    nvd.nist.gov

References

CVE-2026-33566 · ZeroDay Findings