CVE-2026-19909
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Vulnerability in PAX Technology Q80 AIP file parsing allows link following, enabling remote code execution by a network-adjacent attacker without authentication.
Risk Assessment
An attacker can abuse the installer to write arbitrary files, and combined with other vulnerabilities, execute code with root privileges.
Recommendation
Apply patches from PAX Technology for the Q80 device.
Other vulnerabilities in PAX Technology Q80
See all- CVE-2026-19910High
Vulnerability in PAX Technology Q80 Application Installer allows bypass of cryptographic signature verification, enabling remote code execution by a network-adjacent attacker without authentication.
- CVE-2026-19908High
Vulnerability in PAX Technology Q80 XCB daemon is due to missing authentication before allowing access to functionality, allowing a network-adjacent attacker to disclose sensitive information and modify configuration.
Original NVD description (English source)
PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of AIP files. By creating a symbolic link, an attacker can abuse the installer process to write arbitrary files. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-30583.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS