01 Record

CVE-2026-19909

PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability

HighPUBLISHEDCNA: zdi

Base score7.5 CVSS v3.xCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

02 Description

PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability

Published: 2026-08-14 20:00Z38 MIN AGO
Last updated: 2026-08-14 20:00Z38 MIN AGO
Reserved: 2026-08-14
Assigning CNA: zdi
Record state: PUBLISHED
Severity: High (CVSS 7.5)
CVSS vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-59
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: 196b09527e0b80c1934db302b070d34f18b8a77e84ac2b716fa0631fcc328ccd

VendorProductVersionsPlatforms

PAX TechnologyQ802.6.33.6690R—