CVE-2026-84696CWE-306

CVE-2026-84696

High · published September 2, 2026

CVSS v3.1
8.2
EPSS
0%
Percentile
12.0
In the wild
Unconfirmed
What it is

Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms. Attackers can bypass the weak CRC-16 based unlock handshake or exploit builds with no VUC lock to read and write controller memory and raw flash, persisting implants across power cycles.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
9.3 · CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00221 · 12.0th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-09-02T05:17Z
References (4)
https://github.com/trulycrisp/disksec · [email protected]https://github.com/trulycrisp/psychite · [email protected]https://trulycrisp.github.io/drivefirmware/phison_s11/ · [email protected]https://www.vulncheck.com/advisories/phison-ps3111-s11-controller-firmware-missing-authentication-on-vendor-unique-commands · [email protected]
EPSS history
Timeline
  • 03 SEP 03:32Z
    EPSS moved — → 0%
    epss
  • 02 SEP 00:37Z
    Phison PS3111-S11 Controller Firmware Missing Authentication on Vendor Unique Commands
    cvelistv5