CVE-2026-36355

Katalog CVE

CVSS 7.7 · High EPSS 0,56%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor. Skor CVSS 3.1 7.7 (High) menurut CISA ADP.

Deskripsi (NVD)

The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions through v3.4.14B) does not perform any access control checks on the write_mem (ioctl 0x89F5) and read_mem (ioctl 0x89F6) debug handlers, which are compiled into production builds via the unconditionally defined _IOCTL_DEBUG_CMD_ macro in 8192cd_cfg.h

Rincian

Terbit di NVD

5 Mei 2026

Terakhir diubah

5 Juli 2026

Status NVD

Awaiting Analysis

CVSS 3.1

7.7 (High), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-782: Exposed IOCTL with Insufficient Access Control
CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,56% peluang dieksploitasi; lebih tinggi dari 45,0% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/totekuh/CVE-2026-36355