CVE-2026-32325
Privilege Escalation in ServerView Agents for Windows
Publication date: 2026-06-01
Last updated on: 2026-06-01
Assigner: JPCERT/CC
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| fsas_technologies_inc | serverview_agents_for_windows | to 11.60.04 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-268 | Two distinct privileges, roles, capabilities, or rights can be combined in a way that allows an entity to perform unsafe actions that would not be allowed without that combination. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2026-32325 is a privilege chaining vulnerability found in ServerView Agents for Windows versions V11.60.04 and earlier. It allows a local authenticated attacker who can log in to the affected server to escalate their privileges to the SYSTEM level, which is the highest level of privilege on a Windows system.
How can this vulnerability impact me? :
If exploited, this vulnerability can allow an attacker with local access to the server to gain SYSTEM privileges. This means the attacker could fully control the system, potentially compromising confidentiality, integrity, and availability of data and services on the affected server.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
This vulnerability allows a local authenticated attacker to escalate privileges to SYSTEM level, which can lead to unauthorized access to sensitive data and critical system functions.
Such unauthorized privilege escalation can impact the confidentiality, integrity, and availability of data, potentially causing non-compliance with standards and regulations like GDPR and HIPAA that require strict access controls and protection of sensitive information.
Therefore, exploitation of this vulnerability could result in violations of these compliance requirements if sensitive data is accessed or altered without proper authorization.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, the vendor recommends updating ServerView Agents for Windows to the latest version beyond V11.60.04.
If updating immediately is not possible, applying any available workaround provided by the vendor until the update can be applied is advised.