CVE-2026-9492CWE-782

GIGABYTE|Gigabyte Control Center - Improper Access Control

High · published July 13, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
4.5
In the wild
Unconfirmed
What it is

The MBStorage DRAM lighting control module within Gigabyte Control Center (GCC) developed by GIGABYTE Technology has an Improper Access Control vulnerability. Authenticated local attackers can send specific IOCTL commands through the driver MyPortIO_x64.sys bundled with the module, thereby arbitrarily reading and writing physical memory and obtaining kernel-level privileges.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00157 · 4.5th percentile
Weakness
CWE-782 · Exposed IOCTL with Insufficient Access Control
Published
2026-07-13T03:41Z
EPSS history
Timeline
  • 13 JUL 03:41Z
    GIGABYTE|Gigabyte Control Center - Improper Access Control
    cvelistv5