CVE-2026-14551 — פרטי פגיעות

תיאור (מקור, אנגלית)

The servereye client (also known as sensorhub, technically ClientAgentContainerService) versions 20.15 and earlier are vulnerable to Local Privilege Escalation. The high-privileged service SE3Recovery (EmergencyRecoveryService.exe), running as SYSTEM, periodically monitors the directory %ProgramData%\ServerEye3\update\ for a trigger file named "update_available". Due to insufficient access restrictions on this directory, a local standard user can create the trigger file and provide a path to a directory containing malicious JSON instructions. The service subsequently executes the utility UpdaterAction.exe with SYSTEM privileges, which parses the instructions and performs an unvalidated file copy from a user-controlled source to a protected system destination (e.g., overwriting a service binary). This leads to full system compromise as the service automatically restarts the overwritten binary with SYSTEM privileges.

מדדים

CVSS 3.1: 8.8 (HIGH) מקור הציון: CNA CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS — סבירות ניצול: 0% (אחוזון 000) נכון ל-26/7/2026
CWE: CWE-73, CWE-269, CWE-379

קישורים

https://www.servereye.de/security-bulletins/2026-001/

תיאור (מקור, אנגלית)

מדדים

קישורים

נגישות