Skip to main content

EUVD-2026-17917

| CVE-2026-35099 HIGH
Race Condition (CWE-362)
2026-04-01 mitre GHSA-jhjf-xmxj-grf3
7.4
CVSS 3.1
Share

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

7
Re-analysis Queued
Apr 27, 2026 - 19:22 vuln.today
cvss_changed
Analysis Updated
Apr 16, 2026 - 06:09 EUVD-patch-fix
executive_summary
Re-analysis Queued
Apr 16, 2026 - 05:29 backfill_euvd_patch
patch_released
Patch available
Apr 16, 2026 - 05:29 EUVD
11.2.1.28
EUVD ID Assigned
Apr 01, 2026 - 16:00 euvd
EUVD-2026-17917
Analysis Generated
Apr 01, 2026 - 16:00 vuln.today
CVE Published
Apr 01, 2026 - 15:39 nvd
HIGH 7.4

DescriptionNVD

Lakeside SysTrack Agent 11 before 11.2.1.28 has a race condition with resultant Local Privilege Escalation to SYSTEM.

AnalysisAI

Local privilege escalation to SYSTEM via race condition in Lakeside SysTrack Agent 11 (versions prior to 11.2.1.28) allows unauthenticated local attackers to gain complete system control through timing-dependent exploitation. EPSS risk assessment and KEV status not available at time of analysis; no public exploit identified at time of analysis. …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: Identify all endpoints running Lakeside SysTrack Agent versions before 11.2.1.28 using your endpoint inventory or agent management console. Within 7 days: Deploy SysTrack Agent version 11.2.1.28 or later across all affected systems using your standard patch management process. …

Sign in for detailed remediation steps.

Share

EUVD-2026-17917 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy