CVE-2026-81326

2th percentile - higher than 2% of all known CVEs

QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password.

The risk is the possibility of privilege escalation by a local attacker, potentially leading to full system compromise.

It is recommended to replace the default cryptographic key with a unique one per installation and to restrict local access to systems with the client installed.