CVE-2026-22898CWE-306

QVR Pro

Critical · published March 20, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
52.4
In the wild
Unconfirmed
What it is

A missing authentication for critical function vulnerability has been reported to affect QVR Pro. The remote attackers can then exploit the vulnerability to gain access to the system.

We have already fixed the vulnerability in the following version:

QVR Pro 2.7.4.14 and later

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00695 · 52.4th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-03-20T16:21Z
EPSS history
Timeline
  • 20 MAR 16:21Z
    QVR Pro
    cvelistv5