Signature Verification Bypass in PAX Technology Q80 Application Installer

CVE-2026-19910

What is CVE-2026-19910?

A vulnerability in the application installer of PAX Technology Q80 allows attackers on the same network to exploit a flaw in cryptographic signature verification. This oversight permits arbitrary code execution without requiring authentication, facilitating more extensive attacks that can compromise the system at the root level. By leveraging this vulnerability, attackers may combine it with other weaknesses to enhance their access, making proactive measures essential for safeguarding affected installations.

References