CVE-2025-26692: Sios Technology, Inc Quick Agent v2

Critical severity, CVSS 9.2. EPSS: 0.9% chance of exploitation in the next 30 days.

Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory ('Path Traversal'). If exploited, arbitrary code may be executed by a remote unauthenticated attacker with the Windows system privilege where the product is running.

Affected products

• Sios Technology, Inc Quick Agent v2: before 2.9.8 (fixed in 2.9.8)
• Sios Technology, Inc Quick Agent v3: before 3.2.1 (fixed in 3.2.1)

Published 2025-04-28. Last modified 2026-06-17.