OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-84408

HIGH · CVSS 8.8 EPSS 0.63%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

An improper access control vulnerability in a named pipe within the affected Windows product allows local attackers to execute arbitrary commands with SYSTEM privileges on the host machine. This high-severity flaw poses a significant risk to systems where the client is installed, as it could lead to full system compromise. Organizations using this product should prioritize patching to mitigate potential exploitation by malicious insiders.

CVE
CVE-2026-84408
Severity
HIGH
CVSS
8.8
EPSS
0.63%
Windows

Original NVD Description

QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to execute arbitrary commands with SYSTEM privileges.