VulnSocial

CVE-2026-14551General

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The servereye client (also known as sensorhub, technically ClientAgentContainerService) versions 20.15 and earlier are vulnerable to Local Privilege Escalation. The high-privileged service SE3Recovery (EmergencyRecoveryService.exe), running as SYSTEM, periodically monitors the directory %ProgramData%\ServerEye3\update\ for a trigger file named "update_available". Due to insufficient access restrictions on this directory, a local standard user can create the trigger file and provide a path to a directory containing malicious JSON instructions. The service subsequently executes the utility UpdaterAction.exe with SYSTEM privileges, which parses the instructions and performs an unvalidated file copy from a user-controlled source to a protected system destination (e.g., overwriting a service binary). This leads to full system compromise as the service automatically restarts the overwritten binary with SYSTEM privileges.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-73CWE-269CWE-379

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • General: 2 classified signals
  • Disclosure: 2 classified signals
  • Peaked 2d ago at 2 mentions (2026-07-22); latest day: 1
  • 4 total mentions across 3 days

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-07-22: 2Mentions · 2026-07-23: 1Mentions · 2026-07-29: 1Patch / Workaround · 2026-07-23: 1Technical Details · 2026-07-22: 1Technical Details · 2026-07-23: 1Technical Details · 2026-07-29: 107-2207-2307-29
Signal classification2 categories
General
250.0%
Disclosure
250.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-07-222
General2
2026-07-231
Disclosure1
2026-07-291
Disclosure1
Full discourse4 posts
  • InfoGuard Labs@InfoGuard_Labs
    Disclosure

    New Advisory from our Pentest Team: We've identified a Local Privilege Escalation vulnerability in the Remote Monitoring & Management Servereye (CVE-2026-14551). Insecure Folder Permissions lead to NT/SYSTEM Details: https://labs.infoguard.ch/advisories/cve-2026-14551_server_eye_local-privilege-escalation/

    Post summary

    The pentest team announced a new local privilege escalation flaw (CVE‑2026‑14551) in ServerEye caused by insecure folder permissions, allowing unauthorized elevation to NT/SYSTEM, with an advisory link for further details.

    0201721.2K
    302 followersView on X
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Disclosure

    #CVE-2026-14551 - Critical LPE in #Servereye (SE3Recovery service). Local standard user can escalate to SYSTEM via insecure directory. #CVSS 8.8. No patch available - apply mitigations now. #CVEAlert #infosec #devsecops #devops #developer #hacker https://www.valtersit.com/cve/CVE-2026-14551

    Post summary

    A critical local privilege escalation vulnerability (CVE-2026-14551) affecting Servereye's SE3Recovery service is disclosed with no patch yet; users are urged to apply mitigations.

    0000059
    989 followersView on X
  • ADK Cyber@ADKCyber
    General

    CVE-2026-14551 (CVSS 8.8): servereye clients <=20.15 vulnerable to local privilege escalation. Review and update if in use. https://nvd.nist.gov/vuln/detail/CVE-2026-14551 via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/c9BlTz6U3A

    Post summary

    CVE-2026-14551 is a known local privilege escalation flaw in ServerEye clients up to v20.15, with a CVSS score of 8.8; users are advised to review and update if the affected software is in use.

    0000040
    89 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-14551 Local Privilege Escalation in ServerEye Client Versions 20.15 and Earlier https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-14551

    Post summary

    The post only states the CVE identifier and a brief severity label, with no actionable or detailed information about the vulnerability.

    0000090
    4.1K followersView on X

Explore more

Back to dashboard