CVE-2026-59683

A flaw was found in the OpenRGB network SDK protocol. Profile names received over the network are used directly in filesystem path construction without sanitization, allowing unauthenticated remote attackers to write attacker-controlled data to arbitrary filesystem paths via path traversal. By...

EUVD-2026-66359

The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths extension of CVE-2026-59682. This allows either a full system compromise from local or remote if the daemon is running as root or a full account takeover if the daemon is running in user...

EUVD-2026-66362

The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data...

EUVD-2026-66380

Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...

Linux Distros Unpatched Vulnerability : CVE-2026-59682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3. CVE-2026-59682 Note that Nessus relies on the presence o...

Linux Distros Unpatched Vulnerability : CVE-2026-18794

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data. CVE-2026-18794...

Linux Distros Unpatched Vulnerability : CVE-2026-59683

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths extension of CVE-2026-59682. This allows either a full...

CVE-2026-18794

A flaw was found in OpenRGB. The OpenRGB network protocol allows a remote attacker to cause out-of-bounds memory reads and writes by sending inconsistent data. This could lead to information disclosure, arbitrary code execution, or a Denial of Service DoS. Mitigation To mitigate this issue,...

CVE-2026-59683

The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths extension of CVE-2026-59682. This allows either a full system compromise from local or remote if the daemon is running as root or a full account takeover if the daemon is running in user...

CVE-2026-59682

Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...

CVE-2026-18794

The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data...

CVE-2026-59682

Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...

UBUNTU-CVE-2026-18794

The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data...

UBUNTU-CVE-2026-59683

The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths extension of CVE-2026-59682. This allows either a full system compromise from local or remote if the daemon is running as root or a full account takeover if the daemon is running in user...

UBUNTU-CVE-2026-59682

Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...

CVE-2026-59683

The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths extension of CVE-2026-59682. This allows either a full system compromise from local or remote if the daemon is running as root or a full account takeover if the daemon is running in user...

CVE-2026-18794

The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data...

CVE-2026-18794

OpenRGB is vulnerable in its network protocol due to insufficient input data validation. An attacker can pass inconsistent data over the network to cause memory exhaustion and out-of-bounds memory reads and writes , leading to denial-of-service and potential memory corruption. The vulnerability i...

CVE-2026-18794 OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite

The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data...

CVE-2026-18794

The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data...