Vulnerability · Published Jan 15, 2026 · Assigned by VulnCheck

CVE-2021-4776710-Strike Network Inventory Explorer Pro 9.31 - 'srvInventoryWebServer' Unquoted Service Path

High 7.8

In plain English

A high-severity security flaw in Strike Network Inventory Explorer Pro from 10-Strike. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).

Severity (CVSS 3.1)7.8High

Exploit odds (30 days)0.2%top 85.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

10-Strike Network Inventory Explorer Pro 9.31 contains an unquoted service path vulnerability in the srvInventoryWebServer service running with LocalSystem privileges. Attackers can exploit the unquoted path by placing malicious executables in potential path segments to achieve privilege escalation and execute code with system-level permissions.

Affected products (as reported)

Vendor	Product	Versions
10-Strike	Strike Network Inventory Explorer Pro	9.31

Weakness: CWE-428 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

ExploitDB-50494 exploit
Vendor Homepage product