Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
CVE-2026-81326: QND client can expose admin credentials on Windows
CVE-2026-81326 · published 1 month ago
Summary
The QND Premium, Standard, and Advance client programs for Windows contain a fixed encryption key. Because of this, anyone who is already logged into the computer could retrieve the administrator ID and password used by the software. Update the client to a version that replaces the hard‑coded key or remove the software if a fix is not available.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| qualitysoft corporation | qnd premium | <= Ver.11.1i |
| qualitysoft corporation | qnd standard | <= Ver.11.1i |
| qualitysoft corporation | qnd advance | <= Ver.11.0.9i |
Original advisory text
QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, incl...
QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-321Use of Hard-coded Cryptographic Key
Timeline
Published16 Sep 2026
Updated26 Oct 2026
First seen16 Sep 2026
Track software like this
Free during beta