CVE-2023-4991

7.8 highEPSS 0.2%

High (7.8) in quescom nextbx qwalerter. EPSS 0.2% chance of exploitation in the next 30 days.

A vulnerability was found in NextBX QWAlerter 4.50. It has been rated as critical. Affected by this issue is some unknown functionality of the file QWAlerter.exe. The manipulation leads to unquoted search path. It is possible to launch the attack on the local host. The identifier of this vulnerability is VDB-239804. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-428
Published: 2023-09-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

quescom:nextbx_qwalerter

References

https://vuldb.com/?ctiid.239804
https://vuldb.com/?id.239804
https://vuldb.com/?ctiid.239804
https://vuldb.com/?id.239804

Check your stack JSON