---
id: CVE-2026-101020
title: >-
  An incorrect permission assignment for critical resource issue exists in
  AssetView, AssetView CLOUD, and AssetView Cloud +
summary: >-
  An incorrect permission assignment for critical resource issue exists in
  AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is
  exploited, a local authenticated attacker who can log in to the Windows system
  where Man…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-732
published: '2026-10-13'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T09:17:13.257'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-101020'
references:
  - url: 'https://jvn.jp/en/jp/JVN38664315/'
    label: vultures@jpcert.or.jp
  - url: 'https://www.hammock.jp/assetview/info/261013.html'
    label: vultures@jpcert.or.jp
tags:
  - nvd
ingestedAt: '2026-10-13T09:20:23.187Z'
---

## Overview

An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited, a local authenticated attacker who can log in to the Windows system where Management Console or Client Terminal for the product is running may gain SYSTEM privileges.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.