OpenRGB
by OpenRGB
Source repositories
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-59683 | Cri | 0.57 | 9.8 | 0.01 | Aug 26, 2026 | The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths (extension of CVE-2026-59682). This allows either a full system compromise from local or remote (if the daemon is running as root) or a full account takeover (if the daemon… | ||
| CVE-2026-59682 | Cri | 0.52 | 9.1 | 0.01 | Aug 26, 2026 | Arbitrary file overwrite via SAVE_PROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3. | ||
| CVE-2026-18794 | Hig | 0.46 | 8.2 | 0.00 | Aug 26, 2026 | The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data. |
- risk 0.57cvss 9.8epss 0.01
The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths (extension of CVE-2026-59682). This allows either a full system compromise from local or remote (if the daemon is running as root) or a full account takeover (if the daemon…
- risk 0.52cvss 9.1epss 0.01
Arbitrary file overwrite via SAVE_PROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3.
- risk 0.46cvss 8.2epss 0.00
The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data.