


Perceptive Security
SOC/SIEM Consultancy

IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to d…
Published:
1 maart 2026 om 23:00:00
Alert date:
2 maart 2026 om 08:01:55
Source:
nvd.nist.gov
Operating Systems, Identity & Access
IDExpert Windows Logon Agent developed by Changing contains a critical Remote Code Execution vulnerability. The flaw allows unauthenticated remote attackers to force the system to download and execute arbitrary executable files from remote sources. This represents a severe security risk as it provides complete system compromise capabilities without requiring authentication. The vulnerability affects the Windows logon authentication system, potentially allowing attackers to gain initial access and establish persistence on affected systems.
Technical details
Mitigation steps:
Affected products:
IDExpert Windows Logon Agent
Related links:
https://nvd.nist.gov/vuln/detail/CVE-2026-2999
https://www.changingtec.com/news_detail.jsp?item_id=348
https://www.twcert.org.tw/en/cp-139-10741-daed4-2.html
https://www.twcert.org.tw/tw/cp-132-10740-b2eb2-1.html
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
