CVE-2026-4415CWE-23

GIGABYTE｜Gigabyte Control Center - Arbitrary File Write

Critical · published March 30, 2026

CVSS v4.0
9.2
EPSS
1%
Percentile
60.6
In the wild
Unconfirmed
What it is

Gigabyte Control Center developed by GIGABYTE has an Arbitrary File Write vulnerability. When the pairing feature is enabled, unauthenticated remote attackers can write arbitrary files to any location on the underlying operating system, leading to arbitrary code execution or privilege escalation.

The record
Technical detail
CVSS v4.0
9.2 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00942 · 60.6th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2026-03-30T07:36Z
EPSS history
Timeline
  • 30 MAR 07:36Z
    GIGABYTE｜Gigabyte Control Center - Arbitrary File Write
    cvelistv5