CVE-2026-35099: Lakeside Software Systrack Agent

High severity, CVSS 7.4. EPSS: 0.1% chance of exploitation in the next 30 days.

Lakeside SysTrack Agent 11 before 11.5.0.15 has a race condition with resultant local privilege escalation to SYSTEM. The fixed versions are 11.2.1.28, 11.3.0.38, 11.4.0.24, and 11.5.0.15.

Affected products

• Lakeside Software Systrack Agent: from 11, before 11.2.1.28 (fixed in 11.2.1.28); from 11.3, before 11.3.0.38 (fixed in 11.3.0.38); from 11.4, before 11.4.0.24 (fixed in 11.4.0.24); from 11.5, before 11.5.0.15 (fixed in 11.5.0.15)

Published 2026-04-01. Last modified 2026-06-17.