# ADV-2026-014 - .NET Vulnerabilities in Netwrix Access Analyzer FSAA Data Collector

**URL:** <https://community.netwrix.com/t/adv-2026-014-net-vulnerabilities-in-netwrix-access-analyzer-fsaa-data-collector/140417>\
**Category:** Access Analyzer Security Advisories\
**Tags:** security-advisory, access-analyzer-security-advisory\
**Created:** [August 18, 2026, 12:00pm UTC](https://community.netwrix.com/t/adv-2026-014-net-vulnerabilities-in-netwrix-access-analyzer-fsaa-data-collector/140417 "2026-08-18T12:00:47Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![netwrix-product-security](https://yyz1.discourse-cdn.com/netwrix/user_avatar/community.netwrix.com/netwrix-product-security/32/3102_2.png) [@netwrix-product-security](https://community.netwrix.com/u/netwrix-product-security)\
**Post date:** [August 18, 2026, 12:00pm UTC](https://community.netwrix.com/t/adv-2026-014-net-vulnerabilities-in-netwrix-access-analyzer-fsaa-data-collector/140417/1 "2026-08-18T12:00:47Z")

</div>

# Executive Summary

The Netwrix Access Analyzer FSAA (File System Access) Data Collector includes the Microsoft .NET 8.0 runtime. The [Microsoft July 2026 .NET servicing update](https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-july-2026-servicing-updates/) addresses 17 security vulnerabilities that could potentially result in remote code execution, elevation of privilege, security feature bypass, tampering, spoofing, or denial of service. Netwrix has updated the .NET runtime included with the FSAA Data Collector from version 8.0.23 to 8.0.29 to address these issues.

Because the .NET runtime is included with the FSAA Data Collector, updating the system-installed .NET runtime does not update the affected component. Users of Netwrix Access Analyzer are advised to update the FSAA Data Collector to the latest version immediately. Netwrix is unaware of any evidence of active exploitation of these vulnerabilities.

# Vulnerability

| Title | Affected Component | Affected Versions | CVSS 4.0 Score | CVSS 3.1 Score (Base / Temporal) | Description |
| --- | --- | --- | --- | --- | --- |
| Dependency on Vulnerable Third-Party Components | Netwrix Access Analyzer FSAA Data Collector | \>=12.0, \<=12.0.1489.1950 | [8.7](https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N) | [8.8 / 7.7](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) | The FSAA Data Collector includes a version of the Microsoft .NET 8.0 runtime affected by 17 publicly disclosed vulnerabilities. |

# Exploitability

Factors such as whether details about the vulnerability are publicly known, whether an exploit is readily available, or whether adversaries are actively exploiting the vulnerability are valuable in making risk-based judgments about urgency and priority; customers should use the information below in making those decisions.

| Title | Publicly known? | Exploit available? | Actively exploited? |
| --- | --- | --- | --- |
| Dependency on Vulnerable Third-Party Components | Yes | No | No |

# Solution

All Netwrix Access Analyzer customers are advised to update all installed instances of the FSAA Data Collector versions \>=12.0 to version 12.0.1489.1950 as soon as possible by applying the applicable installer listed in the Official Fixes table below.

Upgrade instructions are available in the [Netwrix Access Analyzer documentation](https://docs.netwrix.com/docs/accessanalyzer/12_0/install/application/upgrade/overview).

Please contact the [Netwrix technical support team](https://www.netwrix.com/support.html#contact-us) should you need assistance.

# Official Fixes

Updated software has been released containing official fixes for all listed vulnerabilities.

| Component | Release Version |
| --- | --- |
| Netwrix Access Analyzer Installer | 12.0.0.1300 |
| Netwrix Access Analyzer FSAA Proxy Installer | 12.0.0.1278 |

# FAQ

1. **How do I determine the version of the installed FSAA Data Collector?**

2. **Do I need to update all components?**

3. **Are there any configuration changes required after updating?**

# Revisions

Updates to this advisory may be made as necessary. Information about each change will be published in the table below.

| Revision | Date | Description |
| --- | --- | --- |
| 2 | 2026-08-18T15:40:00Z | Updated affected versions |
| 1 | 2026-08-18T12:00:00Z | First published |

# Disclaimer

The information and materials included in or linked to this Security Advisory are provided on an “as-is” basis and without warranty of any kind, and we disclaim all representations and warranties of any kind, whether express or implied, including warranties of merchantability and fitness for a particular use. You acknowledge and agree that your use of the information and materials included in or linked to this Security Advisory are at your own risk.

---

<div class="post-metadata">

**Author:** ![netwrix-product-security](https://yyz1.discourse-cdn.com/netwrix/user_avatar/community.netwrix.com/netwrix-product-security/32/3102_2.png) [@netwrix-product-security](https://community.netwrix.com/u/netwrix-product-security)\
**Post date:** [August 18, 2026, 3:38pm UTC](https://community.netwrix.com/t/adv-2026-014-net-vulnerabilities-in-netwrix-access-analyzer-fsaa-data-collector/140417/2 "2026-08-18T15:38:37Z")

</div>

_An update was made to this advisory._

---

<div class="post-metadata">

**Author:** ![netwrix-product-security](https://yyz1.discourse-cdn.com/netwrix/user_avatar/community.netwrix.com/netwrix-product-security/32/3102_2.png) [@netwrix-product-security](https://community.netwrix.com/u/netwrix-product-security)\
**Post date:** [August 18, 2026, 3:44pm UTC](https://community.netwrix.com/t/adv-2026-014-net-vulnerabilities-in-netwrix-access-analyzer-fsaa-data-collector/140417/3 "2026-08-18T15:44:49Z")

</div>

_An update was made to this advisory._