Security Advisory

CVE-2025-26692

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-04-27 23:56:48
Last updated 2025-04-28 15:26:59
Assigner jpcert
State PUBLISHED

Description

Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory (Path Traversal). If exploited, arbitrary code may be executed by a remote unauthenticated attacker with the Windows system privilege where the product is running.