Vulnerability · Published Jun 17, 2026 · Assigned by certcc
CVE-2026-8049CVE-2026-8049
Medium 5.3
In plain English
A medium-severity security flaw in SignalRGB kernel driver from SignalRGB. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.1%top 98.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In SignalRGB versions prior to 1.3.7.0, the \\.\SignalIo device object is created without an explicit SDDL security descriptor and without FILE_DEVICE_SECURE_OPEN. This results in overly permissive default access control, allowing any authenticated local user to obtain a handle to the device and issue privileged IOCTLs.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SignalRGB | SignalRGB kernel driver | 0 – before 1.3.7.0 |