CVE-2026-19381highCWE-266CWE-269

CVE-2026-19381: high-severity vulnerability in Kingston FURY CTRL RGB Control Software

Kingston FURY CTRL RGB Control Software Driver NTIOLib_KSFX.sys privileges management

Published

Follow this CVE+ Monitor FURY CTRL RGB Control

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

41Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 8.5epss 0.2%
A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLib_KSFX.sys of the component Driver. Performing a manipulation results in improper privilege management. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
Kingston · FURY CTRL RGB Control Software
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.