QualitySoft Corporation vulnerabilities
Published CVEs affecting QualitySoft Corporation products: 3 record(s), with severity, exploitation and fixes.
CVE-2026-84408
High · 8.8
CWE-782 Sep 16, 2026
QND contains an improper access control vulnerability in a named pipe, which may allow a…
QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to execute arbitrary commands with SYSTEM privileges.
CVE-2026-81326
Medium · 5.5
CWE-321 Sep 16, 2026
QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged…
QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password.
CVE-2025-64701
High · 7.8
CWE-268 Dec 11, 2025
QND Premium/Advance/Standard Ver.11.0.9i and prior contains a privilege escalation…
QND Premium/Advance/Standard Ver.11.0.9i and prior contains a privilege escalation vulnerability, which may allow a user who can log in to a Windows system with the affected product to gain administrator privileges. As a result, sensitive information may be accessed or altered, and arbitrary actions may be performed.