Read the docs
TI-2026-56285 Aliases CVE-2026-81579GHSA-gqq4-6ppr-52p5

An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windows

Priority LOW 39CWE-123Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey2_64.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrator shell, or gain full control over the system.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00167 6th percentileScored 2026-11-07
Fix Fixed wibukey (wibu-systems-ag): 6.71

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
wibu-systems-agwibukeybefore 6.716.71Patch availableCNA
  • wibukey Vendorwibu-systems-ag Affected before 6.71 Fixed in 6.71 Patch available CNA

Remediation

  • Fix · CNA wibukey (wibu-systems-ag) Fixed in 6.71

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    wibu-systems-ag wibukey 6.71

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2026-56286 Memory corruption in wibu-systems-ag wibukeyPriority LOW 39
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-81579
  2. 2026-10-03 Alias added: GHSA-gqq4-6ppr-52p5

References

Advisory 1

  • TI-2026-56280 Improper Access Control in Local-Only Configuration Commands CVSS 3.1HIGH 8.6
  • TI-2026-56281 Format String Vulnerability in Logger CVSS 3.1HIGH 8.2
  • TI-2026-56286 Memory corruption in wibu-systems-ag wibukey CVSS 3.1HIGH 8.8
  • TI-2026-56279 Local Privilege Escalation in CodeMeter Runtime on Windows CVSS 3.1HIGH 7.8
  • TI-2026-56283 Improper Authentication of Session Handles CVSS 3.1HIGH 7.7
  • TI-2026-56282 Missing Sanity Checks for Buffer Lengths CVSS 3.1HIGH 7.5
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences