CVE-2026-4415
GIGABYTE｜Gigabyte Control Center - Arbitrary File Write
- State
- Published
- Severity
- 9.2 Critical
- Published
- Mar 30, 2026
- Updated
- Mar 31, 2026
- Reserved
- Mar 19, 2026
Description
Gigabyte Control Center developed by GIGABYTE has an Arbitrary File Write vulnerability. When the pairing feature is enabled, unauthenticated remote attackers can write arbitrary files to any location on the underlying operating system, leading to arbitrary code execution or privilege escalation.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 9.2 Critical | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | twcert |
| 3.1 | 8.1 High | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H | twcert |
Weaknesses
- CWE-23 Relative path traversal
Affected Products
| Product | Versions |
|---|---|
Gigabyte Control CenterGIGABYTE |
|
References
- https://www.twcert.org.tw/tw/cp-132-10803-ae014-1.htmlthird-party-advisory
- https://www.twcert.org.tw/en/cp-139-10804-689cd-2.htmlthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.