Vulnerability Intelligence Report
CVE-2026-101020
An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited, a local authenticated attacker who can log in to the Windows system where Management Console or Client Terminal for the product is running may gain SYSTEM privileges.
No Active Exploit Signals
CVSS Base Score
7.8
HIGH
Exploitability:1.9
Impact Score:5.9
EPSS Probability:0.10%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-732 ↗Incorrect permission assignment for critical resource
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Hammock Corporation | AssetView | Ver 13.2.7B (unaffected) |
| Hammock Corporation | AssetView CLOUD | Ver 13.2.7B (13.2 series) (unaffected), Ver 13.3.7 (13.3 series) (unaffected) |
| Hammock Corporation | AssetView Cloud + | Ver 2600.201.11 (unaffected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.104%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | JPCERT/CC · CERT · Japan |
| Reserved | 2026-09-28T03:09:47 |
| Published | 2026-10-13T08:40:15 |
| Last Updated | 2026-10-16T17:18:51 |
Community Chatter & Buzz