NetSight
critical9.8

CVE-2026-2999

IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to …

Impact

IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to download arbitrary executable files from a remote source and execute them.

Affected products

VendorProductAffected versions
ChangingtecIdexpert
from 2.7.3.230719 through 2.8.4.250925

Weakness classification

References