Changingtec operates a focused line of digital-signature and certificate-validation products, including SERVIsign, RAVA Certificate Validation System, and related authentication middleware, that occupy a prominent niche in trust and identity infrastructure. Vulnerabilities affecting the vendor skew strongly toward critical-severity outcomes and recur across its product portfolio through structural weaknesses in path traversal, input validation, code integrity, and file access controls—patterns endemic to authentication and signing systems that handle untrusted input and manage sensitive credentials. The exposure across these products reflects the inherent complexity of validating cryptographic artifacts and enforcing strict boundary controls in security-critical components. Defenders should treat Changingtec advisories as high-priority for any organization deploying its signature or certificate infrastructure; live exploitation activity, severity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Changingtec over time
Signals from CVEs in this vendor scope (22 CVEs).
22 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-3000CRITICAL IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to download arbitrary DL | Mar 2, 2026 | 9.8 | 35 | NO | NO |
CVE-2026-2999CRITICAL IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to download arbitrary ex | Mar 2, 2026 | 9.8 | 34 | NO | NO |
CVE-2022-39060CRITICAL ChangingTech MegaServiSignAdapter component has a vulnerability of improper input validation. An unauthenticated remote attacker can exploit this vulnerability to access and modify | Jan 31, 2023 | 9.8 | 31 | NO | NO |
CVE-2022-46304HIGH ChangingTec ServiSign component has insufficient filtering for special characters in the connection response parameter. An unauthenticated remote attacker can host a malicious webs | Jan 3, 2023 | 8.8 | 28 | NO | NO |
CVE-2021-44161HIGH Changing MOTP (Mobile One Time Password) system’s specific function parameter has insufficient validation for user input. A attacker in local area network can perform SQL injection | Dec 29, 2021 | 8.8 | 28 | NO | NO |
CVE-2020-3925HIGH A Remote Code Execution(RCE) vulnerability exists in some designated applications in ServiSign security plugin, as long as the interface is captured, attackers are able to launch R | Feb 3, 2020 | 8.8 | 27 | NO | NO |
CVE-2022-39059HIGH ChangingTech MegaServiSignAdapter component has a path traversal vulnerability within its file reading function. An unauthenticated remote attacker can exploit this vulnerability t | Jan 31, 2023 | 7.5 | 25 | NO | NO |
CVE-2022-46306HIGH ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters in the DLL file path. An unauthenticated remote attacker can | Jan 3, 2023 | 7.8 | 25 | NO | NO |
CVE-2022-39058HIGH RAVA certification validation system has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and access arbit | Oct 18, 2022 | 7.5 | 25 | NO | NO |
CVE-2024-40721HIGH The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenti | Aug 2, 2024 | 8.8 | 24 | NO | NO |
Signals from CVEs in this vendor scope (22 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Changingtec.
Media articles that mention a CVE ID that affects a product developed by Changingtec — matched by CVE ID, not by vendor name.