CVE-2026-2999 - Changing｜IDExpert Windows Logon Agent

Back Back to CVE browser

CRITICAL

Changing｜IDExpert Windows Logon Agent - Remote Code Execution

Published Mar 2, 2026

9.3

CRITICAL

CVSS 4.0

EPSS 0.55%

Description

IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to download arbitrary executable files from a remote source and execute them.

Affected products

Vendor Changing Product IDExpert Windows Logon Agent Default
unaffected
- Version
  2.7.3.230719
  Status
  affected
  Constraints
  <=2.8.4.250925

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Changing

IDExpert Windows Logon Agent

unaffected

Version	Status	Constraints
2.7.3.230719	affected	<=2.8.4.250925

Remediation

Vendor solution

Contact the vendor to patch or download the patch from the official website. Link： https://www.changingtec.com/news_detail.jsp?item_id=348

Weaknesses (1)

CWE-494

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9146
Advisory
https://www.changingtec.com/news_detail.jsp?item_id=348
vendor-advisoryPatchVendor Advisory
https://www.twcert.org.tw/en/cp-139-10741-daed4-2.html
third-party-advisoryThird Party Advisory
https://www.twcert.org.tw/tw/cp-132-10740-b2eb2-1.html
third-party-advisoryThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9146		Advisory
https://www.changingtec.com/news_detail.jsp?item_id=348		vendor-advisoryPatchVendor Advisory
https://www.twcert.org.tw/en/cp-139-10741-daed4-2.html		third-party-advisoryThird Party Advisory
https://www.twcert.org.tw/tw/cp-132-10740-b2eb2-1.html		third-party-advisoryThird Party Advisory