Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-2999

Changing|IDExpert Windows Logon Agent - Remote Code Execution

Description

IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to download arbitrary executable files from a remote source and execute them.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Changing IDExpert Windows Logon Agent

Default version status: unaffected

  • 2.7.3.230719 to ≤ 2.8.4.250925affected

References