CVE-2026-4415criticalCWE-23

CVE-2026-4415: critical vulnerability in Gigabyte Control Center

GIGABYTE｜Gigabyte Control Center - Arbitrary File Write

Published · Updated

Follow this CVE+ Monitor Gigabyte Control Center

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.2epss 1.0%
Gigabyte Control Center developed by GIGABYTE has an Arbitrary File Write vulnerability. When the pairing feature is enabled, unauthenticated remote attackers can write arbitrary files to any location on the underlying operating system, leading to arbitrary code execution or privilege escalation.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
GIGABYTE · Gigabyte Control Center