CVE-2026-59683criticalCWE-73

CVE-2026-59683: falha crítica em CalcProgrammer1 OpenRGB

OpenRGB: local and remote system compromise via arbitrary file write using attacker controlled strings

Publicada em

Seguir esta CVE+ Monitorar OpenRGB+ Monitorar openrgb

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 0.6%
The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths (extension of CVE-2026-59682). This allows either a full system compromise from local or remote (if the daemon is running as root) or a full account takeover (if the daemon is running in user context).
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
CalcProgrammer1 · OpenRGB
CVEs relacionadas — CalcProgrammer1 OpenRGB

No mesmo produto, das mais perigosas para as menos.

CVE-2026-59682HIGHArbitrary file overwrite and deletion local and remote in OpenRGBEPSS 0.5%CVE-2026-18794HIGHOpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwriteEPSS 0.4%