Critical severity9.8NVD Advisory· Published Mar 2, 2026· Updated Jun 17, 2026
CVE-2026-2999
CVE-2026-2999
Description
IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to download arbitrary executable files from a remote source and execute them.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- cpe:2.3:a:changingtec:idexpert:*:*:*:*:*:windows:*:*Range: >=2.7.3.230719,<=2.8.4.250925
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 2.7.3.230719
Patches
Vulnerability mechanics
References
3- www.changingtec.com/news_detail.jspnvdPatchVendor Advisory
- www.twcert.org.tw/en/cp-139-10741-daed4-2.htmlnvdThird Party Advisory
- www.twcert.org.tw/tw/cp-132-10740-b2eb2-1.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.