CVE-2026-84408

QND Premium · improper access control

CVSS 3.0 8.8 HIGHCVSS 4.0 8.7 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-84408

Published

QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to execute arbitrary commands with SYSTEM privileges.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-84408

Published

QND Premium

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "QualitySoft Corporation",
                    "product": "QND Premium",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "0",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThanOrEqual": "Ver.11.1i"
                        }
                    ]
                }

QND Standard

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "QualitySoft Corporation",
                    "product": "QND Standard",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "0",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThanOrEqual": "Ver.11.1i"
                        }
                    ]
                }

QND Advance

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "QualitySoft Corporation",
                    "product": "QND Advance",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "0",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThanOrEqual": "Ver.11.0.9i"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON