CVE-2026-27788

HighCVSS 7.8

Published: 01/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

Incorrect permission assignment for critical resource issue exists in ServerView Agents for Windows V11.60.04 and earlier. A local authenticated attacker can obtain SYSTEM privilege.

Risk Assessment

An attacker with a user account can escalate privileges to SYSTEM, gaining full control over the server.

Recommendation

Update ServerView Agents for Windows to a version later than V11.60.04.

Other vulnerabilities in ServerView Agents

CVE-2026-32325High
Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier. A local authenticated attacker can obtain SYSTEM privilege.

Original NVD description (English source)

Incorrect permission assignment for critical resource issue exists in ServerView Agents for Windows V11.60.04 and earlier. If this vulnerability is exploited, a local authenticated attacker who can log in to the server where the affected product is installed may obtain SYSTEM privilege.