CVE-2026-84408
QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to execute arbitrary commands with SYSTEM privileges.
- Published Sep 16, 2026
- CVSS 8.7 high
- 0.6% chance of exploitation in the next 30 days (EPSS)