CVE-2026-19909
Received Received - Intake

PAX Technology Q80 AIP File Parsing Link Following RCE

Publication date: 2026-08-14

Last updated on: 2026-08-14

Assigner: Zero Day Initiative

Description
PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of AIP files. By creating a symbolic link, an attacker can abuse the installer process to write arbitrary files. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-30583.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-14
Last Modified
2026-08-14
Generated
2026-08-15
AI Q&A
2026-08-14
EPSS Evaluated
N/A
NVD
CVE-2026-19909
EUVD
EUVD-2026-58800

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
pax_technology q80 to 2027-04-22 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-59 The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-19909 is a vulnerability in PAX Technology's Q80 device that allows network-adjacent attackers to execute arbitrary code remotely. The flaw exists in the parsing of AIP files, where an attacker can exploit a symbolic link to manipulate the installer process and write arbitrary files, potentially leading to root-level code execution. Authentication is not required to exploit this vulnerability.

Detection Guidance

Detection of this vulnerability requires monitoring for unusual file operations or symbolic link abuse during AIP file parsing on PAX Technology Q80 devices. Check for unexpected file writes or root-level processes initiated by the installer. No specific commands are provided in the context.

Impact Analysis

This vulnerability allows attackers to execute arbitrary code on the affected PAX Technology Q80 device with root privileges. Since authentication is not required, any attacker within network range could exploit this to gain full control over the device, potentially leading to data theft, system compromise, or further network infiltration.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating GDPR and HIPAA requirements for data protection and security. Organizations using the affected PAX Technology Q80 device may face compliance violations, legal penalties, and reputational damage due to potential exposure of sensitive data.

Mitigation Strategies

Immediately restrict network access to the affected PAX Technology Q80 device to prevent exploitation. Since no official patches are available due to the firmware being end-of-life, isolation is the only recommended mitigation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19909. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart