Vulnerability · Published Jan 21, 2026 · Assigned by jpcert

CVE-2026-24016

High 7.8

In plain English

A high-severity uncontrolled search path in ServerView Agents for Windows from Fsas Technologies Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).

Severity (CVSS 3.0)7.8High
Exploit odds (30 days)0.2%top 94.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

The installer of ServerView Agents for Windows provided by Fsas Technologies Inc. may insecurely load Dynamic Link Libraries. Arbitrary code may be executed with the administrator privilege when the installer is executed.

Affected products (as reported)

VendorProductVersions
Fsas Technologies Inc. ServerView Agents for Windows V11.50.06 and earlier

Weakness: CWE-427 · Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References