Skip to content
OpenAdvisories
Medium · 5.5 CVE-2026-81326 EUVD-2026-80226GHSA-4xm4-3fr7-5qc7

QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's cli…

Published Sep 16, 2026 · Updated Sep 16, 2026 · Assigned by jpcert

Description

QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password.

Affected products

VendorProductAffectedFixed
QualitySoft QND Premium ≤ Ver.11.1i —
QualitySoft QND Standard ≤ Ver.11.1i —
QualitySoft QND Advance ≤ Ver.11.0.9i —

References