CVE-2026-19909: PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability
PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the parsing of AIP files. By creating a symbolic link, an attacker can abuse the installer process to write arbitrary files. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-30583.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19909?
The severity of CVE-2026-19909 is rated as high with a score of 7.5.
How do I fix CVE-2026-19909?
To fix CVE-2026-19909, apply the latest patches and updates provided by PAX Technology for the Q80.
What type of attack does CVE-2026-19909 facilitate?
CVE-2026-19909 facilitates remote code execution by allowing attackers to exploit the vulnerability without authentication.
Who is affected by CVE-2026-19909?
Organizations using the PAX Technology Q80 are affected by CVE-2026-19909.
Can CVE-2026-19909 be exploited remotely?
Yes, CVE-2026-19909 can be exploited by network-adjacent attackers.