{"id":"CVE-2026-24016","state":"PUBLISHED","title":"The installer of ServerView Agents for Windows provided by Fsas Technologies Inc. may insecurely load Dynamic Link Libraries. Arbitrary code may be executed with the administrator ","description":"The installer of ServerView Agents for Windows provided by Fsas Technologies Inc. may insecurely load Dynamic Link Libraries. Arbitrary code may be executed with the administrator privilege when the installer is executed.","publishedAt":"2026-01-21T07:19:03.236Z","updatedAt":"2026-02-24T14:51:46.137Z","severity":{"score":8.4,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"jpcert"},"assigner":"jpcert","products":["Fsas Technologies Inc. ServerView Agents for Windows"],"affected":[{"vendor":"Fsas Technologies Inc.","product":"ServerView Agents for Windows","versions":[{"version":"V11.50.06 and earlier","status":"affected"}]}],"references":["https://www.fsastech.com/ja-jp/resources/security/2026/0121.html","https://jvn.jp/en/jp/JVN65211823/","https://security.ts.fujitsu.com/ProductSecurity/content/FsasTech-PSIRT-FTI-ISS-2026-012107-Security-Notice.pdf"],"weaknesses":["CWE-427"],"ingestedAt":"2026-10-29T20:11:21.040Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/24xxx/CVE-2026-24016.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-24016","state":"PUBLISHED","datePublished":"2026-01-21T07:19:03.236Z","dateUpdated":"2026-02-24T14:51:46.137Z","assignerShortName":"jpcert","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateReserved":"2026-01-20T05:13:56.618Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"The installer of ServerView Agents for Windows provided by Fsas Technologies Inc. may insecurely load Dynamic Link Libraries. Arbitrary code may be executed with the administrator privilege when the installer is executed."}],"affected":[{"vendor":"Fsas Technologies Inc.","product":"ServerView Agents for Windows","versions":[{"version":"V11.50.06 and earlier","status":"affected"}]}],"references":[{"url":"https://www.fsastech.com/ja-jp/resources/security/2026/0121.html"},{"url":"https://jvn.jp/en/jp/JVN65211823/"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_0":{"version":"3.0","baseSeverity":"HIGH","baseScore":7.8,"vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}},{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV4_0":{"version":"4.0","baseSeverity":"HIGH","baseScore":8.4,"vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-427","description":"Uncontrolled Search Path Element","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"jpcert","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateUpdated":"2026-01-21T07:19:03.236Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-01-21T14:28:05.334267Z","id":"CVE-2026-24016","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-01-21T14:28:14.172Z"}},{"title":"CVE Program Container","references":[{"url":"https://security.ts.fujitsu.com/ProductSecurity/content/FsasTech-PSIRT-FTI-ISS-2026-012107-Security-Notice.pdf"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2026-02-24T14:51:46.137Z"},"x_generator":{"engine":"ADPogram 0.0.1"}}]}}}