Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
4 vulnerabilities by Chengdu Qilu Technology
CVE-2026-90508 (GCVE-0-2026-90508)
Vulnerability from nvd – Published: 2026-09-13 09:45 – Updated: 2026-09-13 09:45
VLAI
EPSS
VEX
Title
Chengdu Qilu Technology Ludashi Message Dispatch ProtectFilter64.sys MessageNotifyCallback authorization
Summary
A security flaw has been discovered in Chengdu Qilu Technology Ludashi 6.1026.4715.714. Affected by this vulnerability is the function MessageNotifyCallback in the library ProtectFilter64.sys of the component Message Dispatch Handler. Performing a manipulation results in missing authorization. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/403096 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/403096/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-90508 | third-party-advisory |
| https://vuldb.com/submit/895271 | third-party-advisory |
| https://gist.github.com/lzty/fc5f336dca4c287ab4c2… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Chengdu Qilu Technology | Ludashi |
Affected:
6.1026.4715.714
cpe:2.3:a:chengdu_qilu_technology:ludashi:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:chengdu_qilu_technology:ludashi:*:*:*:*:*:*:*:*"
],
"modules": [
"Message Dispatch Handler"
],
"product": "Ludashi",
"vendor": "Chengdu Qilu Technology",
"versions": [
{
"status": "affected",
"version": "6.1026.4715.714"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Bigcat (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in Chengdu Qilu Technology Ludashi 6.1026.4715.714. Affected by this vulnerability is the function MessageNotifyCallback in the library ProtectFilter64.sys of the component Message Dispatch Handler. Performing a manipulation results in missing authorization. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 2.9,
"vectorString": "AV:L/AC:L/Au:M/C:N/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-863",
"description": "Incorrect Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-13T09:45:07.673Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-403096 | Chengdu Qilu Technology Ludashi Message Dispatch ProtectFilter64.sys MessageNotifyCallback authorization",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/403096"
},
{
"name": "VDB-403096 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/403096/cti"
},
{
"name": "CVE-2026-90508 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-90508"
},
{
"name": "Submit #895271 | Chengdu Qilu Technology Ludashi (\u9c81\u5927\u5e08) 6.1026.4715.714 Missing Authentication",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/895271"
},
{
"tags": [
"exploit"
],
"url": "https://gist.github.com/lzty/fc5f336dca4c287ab4c22168b6dc8ec2"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-09-12T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-09-12T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-09-12T10:57:39.000Z",
"value": "VulDB entry last update"
}
],
"title": "Chengdu Qilu Technology Ludashi Message Dispatch ProtectFilter64.sys MessageNotifyCallback authorization",
"x_generator": [
"VulDB PVTS v202609"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-90508",
"datePublished": "2026-09-13T09:45:07.673Z",
"dateReserved": "2026-09-12T08:52:32.719Z",
"dateUpdated": "2026-09-13T09:45:07.673Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-90503 (GCVE-0-2026-90503)
Vulnerability from nvd – Published: 2026-09-13 08:30 – Updated: 2026-09-13 08:30
VLAI
EPSS
VEX
Title
Chengdu Qilu Technology Ludashi ComputerZ_x64.sys sub_11008 information disclosure
Summary
A flaw has been found in Chengdu Qilu Technology Ludashi 6.1026.4715.714. The affected element is the function sub_11008 in the library ComputerZ_x64.sys. Executing a manipulation of the argument PhysicalAddress can lead to information disclosure. The attack needs to be launched locally. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/403091 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/403091/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-90503 | third-party-advisory |
| https://vuldb.com/submit/895249 | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Chengdu Qilu Technology | Ludashi |
Affected:
6.1026.4715.714
cpe:2.3:a:chengdu_qilu_technology:ludashi:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:chengdu_qilu_technology:ludashi:*:*:*:*:*:*:*:*"
],
"product": "Ludashi",
"vendor": "Chengdu Qilu Technology",
"versions": [
{
"status": "affected",
"version": "6.1026.4715.714"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Bigcat (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw has been found in Chengdu Qilu Technology Ludashi 6.1026.4715.714. The affected element is the function sub_11008 in the library ComputerZ_x64.sys. Executing a manipulation of the argument PhysicalAddress can lead to information disclosure. The attack needs to be launched locally. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 1.4,
"vectorString": "AV:L/AC:L/Au:M/C:P/I:N/A:N/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "Information Disclosure",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "Improper Access Controls",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-13T08:30:05.496Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-403091 | Chengdu Qilu Technology Ludashi ComputerZ_x64.sys sub_11008 information disclosure",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/403091"
},
{
"name": "VDB-403091 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/403091/cti"
},
{
"name": "CVE-2026-90503 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-90503"
},
{
"name": "Submit #895249 | Chengdu Qilu Technology Ludashi 6.1026.4715.714 Exposure of Sensitive Information Due to Incompatible Policies",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/895249"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-09-12T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-09-12T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-09-12T10:51:43.000Z",
"value": "VulDB entry last update"
}
],
"title": "Chengdu Qilu Technology Ludashi ComputerZ_x64.sys sub_11008 information disclosure",
"x_generator": [
"VulDB PVTS v202609"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-90503",
"datePublished": "2026-09-13T08:30:05.496Z",
"dateReserved": "2026-09-12T08:46:37.771Z",
"dateUpdated": "2026-09-13T08:30:05.496Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-90508 (GCVE-0-2026-90508)
Vulnerability from cvelistv5 – Published: 2026-09-13 09:45 – Updated: 2026-09-13 09:45
VLAI
EPSS
VEX
Title
Chengdu Qilu Technology Ludashi Message Dispatch ProtectFilter64.sys MessageNotifyCallback authorization
Summary
A security flaw has been discovered in Chengdu Qilu Technology Ludashi 6.1026.4715.714. Affected by this vulnerability is the function MessageNotifyCallback in the library ProtectFilter64.sys of the component Message Dispatch Handler. Performing a manipulation results in missing authorization. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/403096 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/403096/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-90508 | third-party-advisory |
| https://vuldb.com/submit/895271 | third-party-advisory |
| https://gist.github.com/lzty/fc5f336dca4c287ab4c2… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Chengdu Qilu Technology | Ludashi |
Affected:
6.1026.4715.714
cpe:2.3:a:chengdu_qilu_technology:ludashi:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:chengdu_qilu_technology:ludashi:*:*:*:*:*:*:*:*"
],
"modules": [
"Message Dispatch Handler"
],
"product": "Ludashi",
"vendor": "Chengdu Qilu Technology",
"versions": [
{
"status": "affected",
"version": "6.1026.4715.714"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Bigcat (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in Chengdu Qilu Technology Ludashi 6.1026.4715.714. Affected by this vulnerability is the function MessageNotifyCallback in the library ProtectFilter64.sys of the component Message Dispatch Handler. Performing a manipulation results in missing authorization. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 2.9,
"vectorString": "AV:L/AC:L/Au:M/C:N/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-863",
"description": "Incorrect Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-13T09:45:07.673Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-403096 | Chengdu Qilu Technology Ludashi Message Dispatch ProtectFilter64.sys MessageNotifyCallback authorization",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/403096"
},
{
"name": "VDB-403096 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/403096/cti"
},
{
"name": "CVE-2026-90508 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-90508"
},
{
"name": "Submit #895271 | Chengdu Qilu Technology Ludashi (\u9c81\u5927\u5e08) 6.1026.4715.714 Missing Authentication",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/895271"
},
{
"tags": [
"exploit"
],
"url": "https://gist.github.com/lzty/fc5f336dca4c287ab4c22168b6dc8ec2"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-09-12T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-09-12T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-09-12T10:57:39.000Z",
"value": "VulDB entry last update"
}
],
"title": "Chengdu Qilu Technology Ludashi Message Dispatch ProtectFilter64.sys MessageNotifyCallback authorization",
"x_generator": [
"VulDB PVTS v202609"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-90508",
"datePublished": "2026-09-13T09:45:07.673Z",
"dateReserved": "2026-09-12T08:52:32.719Z",
"dateUpdated": "2026-09-13T09:45:07.673Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-90503 (GCVE-0-2026-90503)
Vulnerability from cvelistv5 – Published: 2026-09-13 08:30 – Updated: 2026-09-13 08:30
VLAI
EPSS
VEX
Title
Chengdu Qilu Technology Ludashi ComputerZ_x64.sys sub_11008 information disclosure
Summary
A flaw has been found in Chengdu Qilu Technology Ludashi 6.1026.4715.714. The affected element is the function sub_11008 in the library ComputerZ_x64.sys. Executing a manipulation of the argument PhysicalAddress can lead to information disclosure. The attack needs to be launched locally. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/403091 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/403091/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-90503 | third-party-advisory |
| https://vuldb.com/submit/895249 | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Chengdu Qilu Technology | Ludashi |
Affected:
6.1026.4715.714
cpe:2.3:a:chengdu_qilu_technology:ludashi:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:chengdu_qilu_technology:ludashi:*:*:*:*:*:*:*:*"
],
"product": "Ludashi",
"vendor": "Chengdu Qilu Technology",
"versions": [
{
"status": "affected",
"version": "6.1026.4715.714"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Bigcat (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw has been found in Chengdu Qilu Technology Ludashi 6.1026.4715.714. The affected element is the function sub_11008 in the library ComputerZ_x64.sys. Executing a manipulation of the argument PhysicalAddress can lead to information disclosure. The attack needs to be launched locally. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 1.4,
"vectorString": "AV:L/AC:L/Au:M/C:P/I:N/A:N/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "Information Disclosure",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "Improper Access Controls",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-13T08:30:05.496Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-403091 | Chengdu Qilu Technology Ludashi ComputerZ_x64.sys sub_11008 information disclosure",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/403091"
},
{
"name": "VDB-403091 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/403091/cti"
},
{
"name": "CVE-2026-90503 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-90503"
},
{
"name": "Submit #895249 | Chengdu Qilu Technology Ludashi 6.1026.4715.714 Exposure of Sensitive Information Due to Incompatible Policies",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/895249"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-09-12T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-09-12T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-09-12T10:51:43.000Z",
"value": "VulDB entry last update"
}
],
"title": "Chengdu Qilu Technology Ludashi ComputerZ_x64.sys sub_11008 information disclosure",
"x_generator": [
"VulDB PVTS v202609"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-90503",
"datePublished": "2026-09-13T08:30:05.496Z",
"dateReserved": "2026-09-12T08:46:37.771Z",
"dateUpdated": "2026-09-13T08:30:05.496Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}