{"id":"CVE-2026-105044","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-105044","generatedAt":"2026-10-28T02:58:19.503Z","title":"Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingteng Host Adaptive Security Platform (Host Monitoring) V3.0 allows an authenticated console administrator to execute arbitrary commands…","description":"Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingteng Host Adaptive Security Platform (Host Monitoring) V3.0 allows an authenticated console administrator to execute arbitrary commands on attached clients via OS command injection","published":"2026-10-21T01:17:20.000Z","lastModified":"2026-10-22T17:36:47.000Z","status":"Awaiting Analysis","sourceIdentifier":"mandiant-cve@google.com","cvss":{"version":"4.0","score":8.5,"severity":"HIGH","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-78"],"affected":[],"epss":{"score":0.00936,"percentile":0.60562,"date":"2026-10-26","history":[{"date":"2026-10-21","score":0.00936,"percentile":0.6039}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.94%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-21T01:17:20.000Z","detail":{"score":"8.5","severity":"HIGH","publishedAt":"2026-10-21T01:17:19.890Z"},"summary":"New CVE, high severity (CVSS 8.5)."}],"references":[{"url":"https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0038.md","source":"mandiant-cve@google.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-105044","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}