Vulnerability · Published Mar 30, 2026 · Assigned by twcert
CVE-2026-4415GIGABYTE｜Gigabyte Control Center - Arbitrary File Write
High 8.1
In plain English
A high-severity security flaw in Gigabyte Control Center from GIGABYTE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 63% of all known vulnerabilities).
Severity (CVSS 3.1)8.1High
Exploit odds (30 days)1.0%top 36.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Gigabyte Control Center developed by GIGABYTE has an Arbitrary File Write vulnerability. When the pairing feature is enabled, unauthenticated remote attackers can write arbitrary files to any location on the underlying operating system, leading to arbitrary code execution or privilege escalation.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| GIGABYTE | Gigabyte Control Center | 0 – through 25.07.21.01 |
Weakness: CWE-23 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://www.twcert.org.tw/tw/cp-132-10803-ae014-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-10804-689cd-2.html third-party-advisory