Vulnerability · Published Sep 2, 2026 · Assigned by VulnCheck

CVE-2026-84696Phison PS3111-S11 Controller Firmware Missing Authentication on Vendor Unique Commands

High 8.2

In plain English

A high-severity missing authentication in PS3111-S11 Controller Firmware from Phison Electronics Corporation. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).

Severity (CVSS 3.1)8.2High

Exploit odds (30 days)0.2%top 87.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms. Attackers can bypass the weak CRC-16 based unlock handshake or exploit builds with no VUC lock to read and write controller memory and raw flash, persisting implants across power cycles.

Affected products (as reported)

Vendor	Product	Versions
Phison Electronics Corporation	PS3111-S11 Controller Firmware	SBFQT1.3

Weakness: CWE-306 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References

https://trulycrisp.github.io/drivefirmware/phison_s11/ technical-description
https://github.com/trulycrisp/psychite exploit
https://github.com/trulycrisp/disksec exploit
VulnCheck Advisory: Phison PS3111-S11 Controller Firmware Missing Authentication on Vendor Unique Commands third-party-advisory