Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-59682

Arbitrary file overwrite and deletion local and remote in OpenRGB

Arbitrary file overwrite via SAVE_PROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Calcprogrammer1
Products
Openrgb
CVE-2026-59683

OpenRGB: local and remote system compromise via arbitrary file write using attacker controlled strings

The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths (extension of CVE-2026-59682). This allows either a full system compromise from local or remote (if the daemon is running as root) or a full account takeover (if the daemon is running in user context).

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Calcprogrammer1
Products
Openrgb
CVE-2026-18794

OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite

The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Calcprogrammer1
Products
Openrgb