Search vulnerabilities

Results 3

Export CSV
CVE-2026-2999

Changing|IDExpert Windows Logon Agent - Remote Code Execution

IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to download arbitrary executable files from a remote source and execute them.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
CVE-2026-3000

Changing|IDExpert Windows Logon Agent - Remote Code Execution

IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to download arbitrary DLL files from a remote source and execute them.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
CVE-2024-10653

CHANGING Information Technology IDExpert - OS Command Injection

IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrative privileges to inject and execute OS commands on the server.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Products