Read the docs
TI-2026-07094 Aliases CVE-2026-8049GHSA-c9xw-w9jw-mq5m

In SignalRGB versions prior to 1.3.7.0, the \\.\SignalIo device object is created without…

Priority LOW 23Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

In SignalRGB versions prior to 1.3.7.0, the \\.\SignalIo device object is created without an explicit SDDL security descriptor and without FILE_DEVICE_SECURE_OPEN. This results in overly permissive default access control, allowing any authenticated local user to obtain a handle to the device and issue privileged IOCTLs.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00111 1st percentileScored 2026-11-07
Fix Fixed SignalRGB kernel driver (SignalRGB): 1.3.7.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SignalRGBSignalRGB kernel driverbefore 1.3.7.01.3.7.0Patch availableCNA
  • SignalRGB kernel driver VendorSignalRGB Affected before 1.3.7.0 Fixed in 1.3.7.0 Patch available CNA

Remediation

  • Fix · CNA SignalRGB kernel driver (SignalRGB) Fixed in 1.3.7.0

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    SignalRGB kernel driver 1.3.7.0

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2026-07095 In SignalRGB versions prior to 1.3.7.0, seven of the thirteen IOCTL handlers dereference…Priority LOW 39
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-8049
  2. 2026-10-03 Alias added: GHSA-c9xw-w9jw-mq5m

References

Other 1

  • TI-2026-07095 In SignalRGB versions prior to 1.3.7.0, seven of the thirteen IOCTL handlers dereference… CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences