CVE-2026-105044: OS Command Injection in Qingteng Host Adaptive Security Platform Security Toolbox
Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingteng Host Adaptive Security Platform (Host Monitoring) V3.0 allows an authenticated console administrator to execute arbitrary commands on attached clients via OS command injection
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Qingteng Host Adaptive Security Platform Security Toolboxto a version that resolves this vulnerability.Fixed in 20260929
Event History
Frequently Asked Questions
Who can exploit this issue?
Exploitation requires an authenticated console administrator in Qingteng Host Adaptive Security Platform (Host Monitoring) V3.0. The attacker must be able to target attached clients through the Security Toolbox.
What systems are affected?
Security Toolbox versions before 20260929 are affected. The provided information identifies the affected deployment as Qingteng Host Adaptive Security Platform (Host Monitoring) V3.0.
What is the impact of successful exploitation?
An authenticated console administrator can execute arbitrary operating-system commands on attached clients.