Is CVE-2026-9492 actively exploited?

No active exploitation of CVE-2026-9492 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-9492 be exploited remotely?

No. CVE-2026-9492 requires local access to exploit.

What is the CVSS score of CVE-2026-9492?

CVE-2026-9492 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2026-9492

HIGH

CVE-2026-9492

CWE-782Published: July 13, 2026· Updated: Jul 14, 2026

7.8

CVSS v3.1

EPSS:0.11%probability of exploitation in 30 daysPercentile:1.5th

Official Description

The MBStorage DRAM lighting control module within Gigabyte Control Center (GCC) developed by GIGABYTE Technology has an Improper Access Control vulnerability. Authenticated local attackers can send specific IOCTL commands through the driver MyPortIO_x64.sys bundled with the module, thereby arbitrarily reading and writing physical memory and obtaining kernel-level privileges.

NVD Source

Technical Analysis

CVE-2026-9492 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.