CVE-2026-4415 - Vulnerability Analysis

Overview

GIGABYTE Gigabyte Control Center contains an arbitrary file write vulnerability caused by the pairing feature, letting unauthenticated remote attackers write files anywhere on the OS, leading to code execution or privilege escalation, exploit requires pairing feature enabled.

Severity & Score

Impact

Unauthenticated remote attackers can write arbitrary files, leading to code execution or privilege escalation on the system.

Mitigation

Update to the latest version with the pairing feature fixed or disabled.

References

• https://www.twcert.org.tw/en/cp-139-10804-689cd-2.html
• https://www.twcert.org.tw/tw/cp-132-10803-ae014-1.html

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner