OS Command Injection Vulnerability in Qingteng Host Adaptive Security Platform
CVE-2026-105044

8.5HIGH

Key Information:

Vendor

Qingteng

Status
Host Adaptive Security Platform
Vendor
CVE Published:
21 October 2026

What is CVE-2026-105044?

A significant OS command injection vulnerability in the Security Toolbox of the Qingteng Host Adaptive Security Platform allows authenticated console administrators to execute arbitrary commands on client systems. This flaw stems from improper neutralization of special elements used in OS commands, posing serious security risks if exploited. Administrators are urged to update to versions released after September 29, 2026, to mitigate potential threats. For detailed remediation steps, refer to the official disclosure documentation.

Affected Version(s)

Host Adaptive Security Platform 0 < 20260929

References

https://github.com/mandiant/Vulnerability-Disclosures/blo...

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.