VULNERABILITY INTELLIGENCE

CVE-2026-4415

CVSS score9.2 CRITICAL
EPSS probability1.00%
CISA KEVNot currently listed
Published2026-03-30
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

Gigabyte Control Center developed by GIGABYTE has an Arbitrary File Write vulnerability. When the pairing feature is enabled, unauthenticated remote attackers can write arbitrary files to any location on the underlying operating system, leading to arbitrary code execution or privilege escalation.

Weakness classification

  • CWE-23: Relative Path Traversal
  • CWE-787: Out-of-bounds Write

Primary references