ZDI-26-525: (0Day) PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability

Published Aug 5, 2026

Updated

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5.

Affected Software

1 affected component

PAX Technology Q80

Event History

Aug 5, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-26-525?

ZDI-26-525 has a CVSS rating of 7.5, indicating a high severity vulnerability.

How do I fix ZDI-26-525?

To mitigate ZDI-26-525, ensure that you apply the latest security patches provided by PAX Technology.

What type of attack does ZDI-26-525 permit?

ZDI-26-525 allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80.

Is authentication required to exploit ZDI-26-525?

No, authentication is not required to exploit ZDI-26-525.

Which software is affected by ZDI-26-525?

ZDI-26-525 affects installations of PAX Technology Q80.

ZDI-26-525: (0Day) PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of ZDI-26-525?

How do I fix ZDI-26-525?

What type of attack does ZDI-26-525 permit?

Is authentication required to exploit ZDI-26-525?

Which software is affected by ZDI-26-525?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of ZDI-26-525?

How do I fix ZDI-26-525?

What type of attack does ZDI-26-525 permit?

Is authentication required to exploit ZDI-26-525?

Which software is affected by ZDI-26-525?