Skip to main content
ZDI-26-524 HIGH 7.1 Published Aug 05, 2026

PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability

PAX

This vulnerability allows network-adjacent attackers to disclose sensitive information and modify configuration on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.1.

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy