CVE-2026-101020

7.8High

Published 13 Oct 2026 · NVD status: Deferred

7.8High

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None
Impact: Full C/I/A compromise
Weakness: CWE-732

The AI triage for this one isn't ready yet. Check back in a few minutes; the full NVD record is below in the meantime.

CVSS v3.0 · CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Ad · In-content banner

NVD description

An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited, a local authenticated attacker who can log in to the Windows system where Management Console or Client Terminal for the product is running may gain SYSTEM privileges.

References

https://jvn.jp/en/jp/JVN38664315/
https://www.hammock.jp/assetview/info/261013.html

Source: nvd.nist.gov/vuln/detail/CVE-2026-101020