CVE-2026-3609 - Vulnerability Analysis

Overview

Wellbia XIGNCODE3 xhunter1.sys kernel driver contains a privilege escalation vulnerability caused by access to IRP_MJ_REITS command interface, letting any user process request PROCESS_ALL_ACCESS, exploit requires local user access.

Severity & Score

Impact

Local attackers can escalate privileges to gain full process access, potentially compromising the entire system.

Mitigation

Update to the latest version or apply vendor patches addressing this vulnerability.

References

• https://blacksnufkin.github.io/posts/AntiCheat-LPE-CVE-2026-3609/
• https://crcert.or.kr

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner