CVE-2024-27123

MediumCVSS 5.2

Published: 18/09/2026(UTC)Updated: 28/09/2026(UTC)Translated: 18/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

2th percentile - higher than 2% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability has been reported to affect QcalAgent. The local attackers can then exploit the vulnerability to bypass security mechanisms or read application data.

Risk Assessment

A local attacker can bypass security mechanisms or access application data, potentially leading to a confidentiality breach.

Recommendation

Update QcalAgent to version 1.1.9 or later.

Other vulnerabilities in QcalAgent

CVE-2026-41544High
A path traversal vulnerability has been reported to affect QcalAgent. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.

Original NVD description (English source)

A cross-site scripting (XSS) vulnerability has been reported to affect QcalAgent. The local attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.9 and later

Vulnerability data from NVD (NIST) · CISA KEV · EPSS