CVE-2026-105044

Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions…

Risk score: 63/100
CVSS: 8.5 v4.0
Exploit chance (30 days): 0.9%
Published: 21 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingteng Host Adaptive Security Platform (Host Monitoring) V3.0 allows an authenticated console administrator to execute arbitrary commands on attached clients via OS command injection
Affected: See advisory
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Why it is Amber

CVSS 8.5 high

References

https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0038.md

Original description

Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingteng Host Adaptive Security Platform (Host Monitoring) V3.0 allows an authenticated console administrator to execute arbitrary commands on attached clients via OS command injection

Last activity 21 Oct 2026. Patch Forecast updates every hour.