Skip to content
OpenAdvisories
High · 8.5 CVE-2026-105044 EUVD-2026-106928GHSA-9g2h-r3hx-cgvq

OS Command Injection in Qingteng Host Adaptive Security Platform Security Toolbox

Published Oct 21, 2026 · Updated Oct 30, 2026 · Assigned by Mandiant

Description

Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingteng Host Adaptive Security Platform (Host Monitoring) V3.0 allows an authenticated console administrator to execute arbitrary commands on attached clients via OS command injection

Affected products

VendorProductAffectedFixed
Qingteng Host Adaptive Security Platform < 20260929 20260929

References