CVE-2026-3000 Details
Description
IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to download arbitrary DLL files from a remote source and execute them.
A remote code execution vulnerability has been identified in the IDExpert Windows Logon Agent, specifically in versions 2.7.3.230719 through 2.8.4.250925. This vulnerability allows unauthenticated remote attackers to manipulate the system into downloading and executing arbitrary DLL files from a remote source. The issue arises from a default configuration problem in the WinLogon installation package, which could be exploited by malicious actors.
Users of the IDExpert Windows Logon Agent should immediately update to the latest version. A patch is available for download from the Changing Technology website. Instructions for applying the patch can be found in the patch readme, also available on the Changing Technology website.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 2, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.changingtec.com/news_detail.jsp?item_id=348 | [email protected] | PatchVendor Advisory |
| https://www.twcert.org.tw/en/cp-139-10741-daed4-2.html | [email protected] | Third Party Advisory |
| https://www.twcert.org.tw/tw/cp-132-10740-b2eb2-1.html | [email protected] | Third Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-494 | Download of Code Without Integrity Check | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| changingtec idexpert | >= 2.7.3.230719, <= 2.8.4.250925 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 9, 2026 | Initial Analysis | [email protected] |
| Mar 2, 2026 | New CVE Received | [email protected] |