CVE-2026-3796

Katalog CVE

CVSS 7.8 · High EPSS 0,18%

Kerentanan Incorrect Privilege Assignment pada qianxin qax internet control gateway. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A weakness has been identified in Qi-ANXIN QAX Virus Removal up to 2025-10-22. The affected element is the function ZwTerminateProcess in the library QKSecureIO_Imp.sys of the component Mini Filter Driver. Executing a manipulation can lead to improper access controls. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Rincian

Terbit di NVD

9 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-266: Incorrect Privilege Assignment
CWE-284: Improper Access Control

EPSS (30 hari)

0,18% peluang dieksploitasi; lebih tinggi dari 7,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.349763 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.758991 advisory pihak ketiga · vdb entry
• https://github.com/cwjchoi01/FocusKiller product
• https://github.com/cwjchoi01/FocusKiller/tree/main/FocusKiller product
• https://vuldb.com/?ctiid.349763 permissions required · vdb entry