Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
1.9

Qi-ANXIN QAX Virus Removal allows malicious processes to run unchecked

CVE-2026-3796 · published 8 months ago
Summary

A security flaw in Qi-ANXIN QAX Virus Removal could allow a malicious user to execute unauthorized actions on a computer. This could potentially lead to malicious code being run without being stopped by the operating system. We recommend that users update their software to the latest version to mitigate this risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
qianxin qax_internet_control_gateway <= 2025-10-22
cpe:2.3:a:qianxin:qax_internet_control_gateway:*:*:*:*:*:*:*:*
Original advisory text
A weakness has been identified in Qi-ANXIN QAX Virus Removal up to 2025-10-22. The affected element is the function ZwTerminateProcess in the library QKSecureIO_Imp.sys of the component Mini Filter...
A weakness has been identified in Qi-ANXIN QAX Virus Removal up to 2025-10-22. The affected element is the function ZwTerminateProcess in the library QKSecureIO_Imp.sys of the component Mini Filter Driver. Executing a manipulation can lead to improper access controls. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
1.9 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-266Incorrect Privilege Assignment
CWE-284Improper Access Control
Timeline
Published9 Mar 2026
Updated4 Nov 2026
First seen9 Mar 2026
Sources
CVE-2026-3796 · NVD
Track software like this
Free during beta