Changingtec vulnerabilities
Published CVEs affecting Changingtec products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-3000
Critical · 9.8
CWE-494 Mar 2, 2026
Changing|IDExpert Windows Logon Agent - Remote Code Execution
IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to download arbitrary DLL files from a remote source and execute them.
CVE-2026-2999
Critical · 9.8
CWE-494 Mar 2, 2026
Changing|IDExpert Windows Logon Agent - Remote Code Execution
IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to download arbitrary executable files from a remote source and execute them.