CVE-2026-101020: Incorrect permission assignment for critical resource in Hammock Corporation AssetView

This vulnerability arises from improper permission settings on a critical resource within AssetView products by Hammock Corporation. Exploitation requires local authentication on the Windows system hosting the Management Console or Client Terminal. Successful exploitation allows privilege escalation to SYSTEM level, granting full control over the affected system. The CVSS 3.0 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, low privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

If exploited, a local authenticated attacker can escalate privileges to SYSTEM level on the Windows host running AssetView Management Console or Client Terminal. This grants the attacker full control over the system, potentially leading to complete compromise of the affected machine and any data or processes it manages.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for suspicious activity on systems running AssetView Management Console or Client Terminal.