CVE-2026-32325Disclosure

LOWCVSS 8.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier. If this vulnerability is exploited, a local authenticated attacker who can log in to the server where the affected product is installed may obtain SYSTEM privilege.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-268

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://www.lac.co.jp/lacwatch/alert/20260603_004758.html

Full discourse1 post

ラック公式@lac_security136d
Disclosure
【注意喚起】ServerView Agents for Windowsにおける複数の脆弱性 https://www.lac.co.jp/lacwatch/alert/20260603_004758.html エフサステクノロジーズ株式会社が提供するサーバ管理ソフトウェア「ServerView Agents for Windows」に一般ユーザーがSYSTEM権限で任意コードを実行できる脆弱性（CVE-2026-27788, CVE-2026-32325）を発見しました。これらの脆弱性は一般ユーザーでのコード実行が前提条件となり、特にサーバにインストールされる管理ソフトの脆弱性という性質上、悪用された場合に大きな影響が発生する可能性があるため注意が必要です。本記事では、この脆弱性の概要と対策を紹介します。
Post summary
The article announces the discovery of two CVEs that allow SYSTEM‑level code execution in ServerView Agents for Windows, notes the seriousness of potential exploitation, and indicates pending patches or mitigations.
0201322.5K
22.2K followersView on X

Explore more

Back to dashboard