44 matches found
CVE-2026-59682
A flaw was found in OpenRGB. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted SAVEPROFILE network message to the application. Successful exploitation allows the attacker to overwrite or delete arbitrary files on the target system, leading to...
CVE-2026-59683
A flaw was found in the OpenRGB network SDK protocol. Profile names received over the network are used directly in filesystem path construction without sanitization, allowing unauthenticated remote attackers to write attacker-controlled data to arbitrary filesystem paths via path traversal. By...
EUVD-2026-66359
The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths extension of CVE-2026-59682. This allows either a full system compromise from local or remote if the daemon is running as root or a full account takeover if the daemon is running in user...
EUVD-2026-66362
The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data...
EUVD-2026-66380
Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...
Linux Distros Unpatched Vulnerability : CVE-2026-59682
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3. CVE-2026-59682 Note that Nessus relies on the presence o...
Linux Distros Unpatched Vulnerability : CVE-2026-18794
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data. CVE-2026-18794...
Linux Distros Unpatched Vulnerability : CVE-2026-59683
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths extension of CVE-2026-59682. This allows either a full...
OpenRGB-1.0~rc3.1+git0.g5e81e26f-1.1 on GA media (moderate)
OpenRGB-1.0rc3.1+git0.g5e81e26f-1.1 on GA media Announcement ID: openSUSE-SU-2026:11602-1 Rating: moderate Cross-References: CVE-2026-59682 CVSS scores: CVE-2026-59682 SUSE : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H CVE-2026-59682 SUSE : 8.8...
SUSE CVE-2026-59682
Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...
OpenRGB: Multiple Vulnerabilities
Background OpenRGB is a cross-platform software suite for controlling RGB LED lighting devices. Description Multiple vulnerabilities have been discovered in OpenRGB. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...
GLSA-202608-30 : OpenRGB: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202608-30 OpenRGB: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in OpenRGB. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...
CVE-2026-18794
A flaw was found in OpenRGB. The OpenRGB network protocol allows a remote attacker to cause out-of-bounds memory reads and writes by sending inconsistent data. This could lead to information disclosure, arbitrary code execution, or a Denial of Service DoS. Mitigation To mitigate this issue,...
CVE-2026-59683
The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths extension of CVE-2026-59682. This allows either a full system compromise from local or remote if the daemon is running as root or a full account takeover if the daemon is running in user...
CVE-2026-59682
Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...
CVE-2026-18794
The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data...
CVE-2026-59682
Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...
UBUNTU-CVE-2026-59683
The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths extension of CVE-2026-59682. This allows either a full system compromise from local or remote if the daemon is running as root or a full account takeover if the daemon is running in user...