CVE-2026-41544

HighCVSS 8.7

Published: 15/10/2026(UTC)Updated: 15/10/2026(UTC)Translated: 15/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

28th percentile - higher than 28% of all known CVEs

Summary

Risk Assessment

May lead to unauthorized access to sensitive files and system data.

Recommendation

Update QcalAgent to version 1.1.10 or later.

Other vulnerabilities in QcalAgent

CVE-2024-27123Medium
A cross-site scripting (XSS) vulnerability has been reported to affect QcalAgent. The local attackers can then exploit the vulnerability to bypass security mechanisms or read application data.

Original NVD description (English source)

A path traversal vulnerability has been reported to affect QcalAgent. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.10 and later

Vulnerability data from NVD (NIST) · CISA KEV · EPSS