CVE-2026-35099 HIGH

CVE-2026-35099

Vendor Lakeside Software
Product SysTrack Agent
Weakness CWE-362
Published April 1, 2026
Last update April 1, 2026
View on NVD All CVEs

CVSS base score

7.4/10
Attack vector Local
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Lakeside SysTrack Agent 11 before 11.5.0.15 has a race condition with resultant local privilege escalation to SYSTEM. The fixed versions are 11.2.1.28, 11.3.0.38, 11.4.0.24, and 11.5.0.15.

Key dates

02Disclosure timeline

April 1, 2026 CVE published
April 1, 2026 Record updated