Unrated severityNVD Advisory· Published Jun 19, 2026
Network Inventory Advisor 5.0.26.0 Unquoted Service Path Privilege Escalation
CVE-2019-25747
Description
Network Inventory Advisor 5.0.26.0 installs the niaservice service with an unquoted binary path that allows local attackers to escalate privileges by placing malicious executables in intermediate directories. Attackers can exploit the unquoted path in the service configuration to execute arbitrary code with LocalSystem privileges when the service starts or restarts.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: = 5.0.26.0
Patches
Vulnerability mechanics
References
4- www.exploit-db.com/exploits/47584mitreexploit
- www.vulncheck.com/advisories/network-inventory-advisor-unquoted-service-path-privilege-escalationmitrethird-party-advisory
- www.network-inventory-advisor.commitreproduct
- www.network-inventory-advisor.com/download.htmlmitreproduct
News mentions
0No linked articles in our index yet.