Vulnerability · Published Aug 7, 2026 · Assigned by VulDB
CVE-2026-19195V-Secure Jingyun Antivirus Kernel Driver ZyArk.sys access control
High 7.8
In plain English
A high-severity improper access control in Jingyun Antivirus from V-Secure. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affected element is an unknown function in the library ZyArk.sys of the component Kernel Driver. The manipulation leads to improper access controls. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| V-Secure | Jingyun Antivirus | 2.4.2.39 |
Weakness: CWE-284, CWE-266 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
References
- VDB-386712 | V-Secure Jingyun Antivirus Kernel Driver ZyArk.sys access control vdb-entry, technical-description
- VDB-386712 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- CVE-2026-19195 | CVE Analysis and Report third-party-advisory
- Submit #864561 | V-Secure Technology Jingyun Antivirus 2.4.2.39 Exposed IOCTL with Insufficient Access Control third-party-advisory
- https://github.com/patrickt2017/CVE-2026-19195-PoC exploit