PatchSiren

servereye GmbH CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH servereye GmbH CVE published 2026-07-22

CVE-2026-14551

CVE-2026-14551 is a Local Privilege Escalation vulnerability in servereye client versions 20.15 and earlier. The high-privileged service SE3Recovery (EmergencyRecoveryService.exe), running as SYSTEM, periodically monitors the directory %ProgramData%5CServerEye3%5Cupdate%5C for a trigger file named 'update_available'. Due to insufficient access restrictions on this directory, a local standard user can crea [truncated]