by Kastro
Paper/Archive/CVE-2026-126785

CVE-2026-126785

rmalright TR-VISION HOME — rmalright TR-VISION HOME IOCTL WFanManager.sys sub_11504 default permission

EPSS 0.1%CVSS 9.3
critical.is priorityof 100
28
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 1.5.015 × 200.3No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A vulnerability has been found in rmalright TR-VISION HOME 2.0.5. Impacted is the function sub_11504 in the library WFanManager.sys of the component IOCTL Handler. Such manipulation leads to incorrect default permissions. The attack must be carried out locally. The vendor was contacted early about this disclosure but did not respond in any way.

Affected

ProductAffectedFixed inSource
TR-VISION HOME2.0.5–CNA

Scores by source

VulDB (CNA)9.3CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X
VulDB (CNA)8.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:C
VulDB (CNA)8.8CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:C

References

writeupvuldb.com/vuln/435969refvuldb.com/vuln/435969/ctiwriteupvuldb.com/cve/CVE-2026-126785writeupvuldb.com/submit/1040412