by Kastro
Paper/Archive/CVE-2026-129261

CVE-2026-129261

Kingston FURY CTRL RGB Control Software — Kingston FURY CTRL RGB Control Software IOCTL NTIOLib_X64.sys exposed ioctl with insufficient access control

CVSS 9.3
critical.is priorityof 100
28
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0No EPSS score.000 × 200.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A vulnerability was found in Kingston FURY CTRL RGB Control Software up to 2.0.66.0. The impacted element is an unknown function in the library NTIOLib_X64.sys of the component IOCTL Handler. Performing a manipulation results in exposed ioctl with insufficient access control. The attack is only possible with local access.

Affected

ProductAffectedFixed inSource
FURY CTRL RGB Control Software2.0.0–CNA
FURY CTRL RGB Control Software2.0.1–CNA
FURY CTRL RGB Control Software2.0.2–CNA
FURY CTRL RGB Control Software2.0.3–CNA
FURY CTRL RGB Control Software2.0.4–CNA
FURY CTRL RGB Control Software2.0.5–CNA
FURY CTRL RGB Control Software2.0.6–CNA
FURY CTRL RGB Control Software2.0.7–CNA
FURY CTRL RGB Control Software2.0.8–CNA
FURY CTRL RGB Control Software2.0.9–CNA
FURY CTRL RGB Control Software2.0.10–CNA
FURY CTRL RGB Control Software2.0.11–CNA

Scores by source

VulDB (CNA)9.3CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X
VulDB (CNA)8.2CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:R
VulDB (CNA)8.2CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:R

References

refvuldb.com/vuln/437302refvuldb.com/vuln/437302/ctiwriteupvuldb.com/cve/CVE-2026-129261writeupvuldb.com/submit/1043190