CVE-2026-84408

HighCVSS 8.8

Published: 16/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.07%

63th percentile - higher than 63% of all known CVEs

Summary

QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker logged into a Windows PC where the affected product's client is installed to execute arbitrary commands with SYSTEM privileges.

Risk Assessment

Risk of privilege escalation to SYSTEM by a local attacker, potentially leading to full compromise of the Windows system.

Recommendation

Install the vendor-provided patch and restrict local access to systems where the QND client is installed.

Other vulnerabilities in QND

CVE-2026-81326Medium
QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password.

Original NVD description (English source)

QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to execute arbitrary commands with SYSTEM privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS