← CVE Intelligence

CVE-2026-8049

CVE-2026-8049 PUBLISHED

Description (CNA)

In SignalRGB versions prior to 1.3.7.0, the \\.\SignalIo device object is created without an explicit SDDL security descriptor and without FILE_DEVICE_SECURE_OPEN. This results in overly permissive default access control, allowing any authenticated local user to obtain a handle to the device and issue privileged IOCTLs.

Affected (CNA)

Vendor / productVersions
SignalRGB / SignalRGB kernel driveraffected 0 before 1.3.7.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.