CVE-2026-90508NVD

Description

A security flaw has been discovered in Chengdu Qilu Technology Ludashi 6.1026.4715.714. Affected by this vulnerability is the function MessageNotifyCallback in the library ProtectFilter64.sys of the component Message Dispatch Handler. Performing a manipulation results in missing authorization. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Severity Level

LOW (3.4)

Published Date

13/09/2026

Last Modified

15/09/2026

Exploitation Status

????

EPSS Score

0.11% (percentile 1.6%)

CVSS Base Metrics

CVSS v3 (3.1)

LOW 3.4

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R

CVSS v4 (4.0)

MEDIUM 4.6

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Weaknesses (CWE)

CWE-862 - Missing AuthorizationCWE-863 - Incorrect Authorization

Affected & Patched Versions

Product	Affected Versions	Patched Version
Chengdu Qilu Technology Ludashi	6.1026.4715.714	N/A

📧Email Delivery — Threat intel straight to your inbox.

♾️Unlimited Vendors — Track your entire stack.

🚨All New CVEs — Be the first to know.

⚙️Custom EPSS — Filter noise, focus on risk.

💬Webhooks — Slack & Teams integration.

🚫Ad-Free — Uninterrupted experience.