CVE Explorer
CVE-2026-24016
The installer of ServerView Agents for Windows provided by Fsas Technologies Inc. may insecurely load Dynamic Link Libraries. Arbitrary code may be executed with the administrator privilege when the installer is executed.
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1
Preserved source conflicts
No provider value was silently selected as the winner.
cvss · 2 assertions
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.0"},"metric_type":"cvssV3_0"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:e1e45cdb961bdc56913548708c6d677219223463c3c3b52a4d08724a7c31b810 · sha256:75f14ea5c4edc715… · /containers/cna/metrics/0/cvssV3_0
{"metric":{"baseScore":8.4,"baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"},"metric_type":"cvssV4_0"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:e1e45cdb961bdc56913548708c6d677219223463c3c3b52a4d08724a7c31b810 · sha256:75f14ea5c4edc715… · /containers/cna/metrics/1/cvssV4_0
Affected products and versions
1 source assertion{"product":"ServerView Agents for Windows","vendor":"Fsas Technologies Inc.","versions":[{"status":"affected","version":"V11.50.06 and earlier"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:e1e45cdb961bdc56913548708c6d677219223463c3c3b52a4d08724a7c31b810 · sha256:75f14ea5c4edc715… · /containers/cna/affected/0
Provider-owned CVSS observations
2 source assertions{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.0"},"metric_type":"cvssV3_0"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:e1e45cdb961bdc56913548708c6d677219223463c3c3b52a4d08724a7c31b810 · sha256:75f14ea5c4edc715… · /containers/cna/metrics/0/cvssV3_0
{"metric":{"baseScore":8.4,"baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"},"metric_type":"cvssV4_0"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:e1e45cdb961bdc56913548708c6d677219223463c3c3b52a4d08724a7c31b810 · sha256:75f14ea5c4edc715… · /containers/cna/metrics/1/cvssV4_0
CWE assertions
1 source assertion{"cweId":"CWE-427","description":"Uncontrolled Search Path Element","lang":"en-US","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:e1e45cdb961bdc56913548708c6d677219223463c3c3b52a4d08724a7c31b810 · sha256:75f14ea5c4edc715… · /containers/cna/problemTypes/0/descriptions/0
Source references
3 source assertions{"url":"https://jvn.jp/en/jp/JVN65211823/"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:e1e45cdb961bdc56913548708c6d677219223463c3c3b52a4d08724a7c31b810 · sha256:75f14ea5c4edc715… · /containers/cna/references/1
{"url":"https://security.ts.fujitsu.com/ProductSecurity/content/FsasTech-PSIRT-FTI-ISS-2026-012107-Security-Notice.pdf"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:e1e45cdb961bdc56913548708c6d677219223463c3c3b52a4d08724a7c31b810 · sha256:75f14ea5c4edc715… · /containers/adp/1/references/0
{"url":"https://www.fsastech.com/ja-jp/resources/security/2026/0121.html"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:e1e45cdb961bdc56913548708c6d677219223463c3c3b52a4d08724a7c31b810 · sha256:75f14ea5c4edc715… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.