High severity8.2NVD Advisory· Published Aug 31, 2026

CVE-2026-82876

Description

Phison PS3111-S11 controller firmware verifies RSA signatures using a public modulus embedded within the firmware image itself rather than anchored in immutable storage. Attackers can generate arbitrary RSA key pairs, sign modified firmware with the private key, embed the matching modulus in the signature segment, and the controller accepts the tampered firmware as valid.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Phison/PS3111-S11 controller firmwarellm-create
Trulycrisp/psychitellm-create

Patches

Vulnerability mechanics

References

trulycrisp.github.io/drivefirmware/phison_s11/nvd
www.vulncheck.com/advisories/phison-ps3111-s11-controller-firmware-signature-verification-bypassnvd

News mentions

No linked articles in our index yet.

cvss	0.533
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000