Qinglong task scheduler RCE vulnerabilities exploited in the wild for cryptomining

Snyk reports two authentication-bypass vulnerabilities in the Qinglong task-scheduling panel (CVE-2026-3965, CVE-2026-4047) that have been actively exploited to achieve remote code execution and deploy cryptomining malware. The incident highlights risk to self-hosted automation panels — operators should immediately apply vendor patches, isolate and investigate affected hosts, remove persistence (malware/cron jobs/containers), rotate credentials and secrets, and monitor for suspicious processes and outbound connections.