Vulnerability · Published Mar 26, 2026 · Assigned by jpcert

CVE-2026-32680

High 7.8

In plain English

A high-severity incorrect default permissions in RATOC RAID Monitoring Manager for Windows from RATOC Systems, Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).

Severity (CVSS 3.0)7.8High

Exploit odds (30 days)0.1%top 96.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

The installer of RATOC RAID Monitoring Manager for Windows allows to customize the installation folder. If the installation folder is customized to some non-default one, the folder may be left with un-secure ACLs and non-administrative users can alter contents of that folder. It may allow a non-administrative user to execute an arbitrary code with SYSTEM privilege.

Affected products (as reported)

Vendor	Product	Versions
RATOC Systems, Inc.	RATOC RAID Monitoring Manager for Windows	prior to 2.00.009.260220

Weakness: CWE-276 · Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In plain English

Official description

Affected products (as reported)

References