SCHEMA ST4 vulnerabilities

2 known vulnerabilities in SCHEMA ST4 from Quanos Solutions. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.4 High severity

  SCHEMA ST4: Missing Authorization

  CVE-2026-11858Jun 17, 2026Quanos Solutions

  Quanos SCHEMA ST4 on-premises contains a local privilege escalation vulnerability in the Client Update Service. The update service runs as NT AUTHORITY\SYSTEM and exposes a .NET Remoting interface over a named pipe without sufficient access controls or authori

• 8.4 High severity

  SCHEMA ST4: Deserialization of Untrusted Data

  CVE-2026-11857Jun 17, 2026Quanos Solutions

  Quanos SCHEMA ST4 on-premises contains a local privilege escalation vulnerability in the Client Update Service due to insecure deserialization in the .NET Remoting service. The service is configured with TypeFilterLevel.Full and is bound to local interfaces on