CVE-2026-30896CWE-427

The installer for Qsee Client versions 1.0.1 and prior insecurely load Dynamic Link Libraries (DLLs)

High · published March 9, 2026

CVSS v4.0
8.4
EPSS
0%
Percentile
8.2
In the wild
Unconfirmed
What it is

The installer for Qsee Client versions 1.0.1 and prior insecurely load Dynamic Link Libraries (DLLs). When a user is directed to place some malicious DLL to the same directory and execute the affected installer, then arbitrary code may be executed with the administrative privilege.

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00190 · 8.2th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2026-03-09T05:01Z
EPSS history
Timeline
  • 09 MAR 05:01Z
    The installer for Qsee Client versions 1.0.1 and prior insecurely load Dynamic Link Libraries (DLLs)
    cvelistv5