top of page
perceptive_background_267k.jpg

IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to d…

Published:

1 maart 2026 om 23:00:00

Alert date:

2 maart 2026 om 08:01:55

Source:

nvd.nist.gov

Click to open the original link from this advisory

Operating Systems, Identity & Access

IDExpert Windows Logon Agent developed by Changing contains a critical Remote Code Execution vulnerability. The flaw allows unauthenticated remote attackers to force the system to download and execute arbitrary executable files from remote sources. This represents a severe security risk as it provides complete system compromise capabilities without requiring authentication. The vulnerability affects the Windows logon authentication system, potentially allowing attackers to gain initial access and establish persistence on affected systems.

Technical details

Mitigation steps:

Affected products:

IDExpert Windows Logon Agent

Related links:

Related CVE's:

Related threat actors:

IOC's:

This article was created with the assistance of AI technology by Perceptive.

© 2025 by Perceptive Security. All rights reserved.

email: info@perceptivesecurity.com

Deze website toont informatie afkomstig van externe bronnen; Perceptive aanvaardt geen verantwoordelijkheid voor de juistheid, volledigheid of actualiteit van deze informatie.

bottom of page