Exposed IOCTL in Yungengxin Cloud Billing allows process termination
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- None · Low · Low
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
Yungengxin Cloud Billing 2024.11.28.11 is affected through its IOCTL Process Termination component in the LWBilling64.sys library. Manipulating the Pid argument of the function sub_14000443C exposes an ioctl with insufficient access control (CWE-782). A local attacker with low privileges can trigger this, and a public exploit has been published.
Written with Claude Haiku 5.5 from the sources below · 2026-10-29
Description from the CNA
A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affected by this vulnerability is the function sub_14000443C in the library LWBilling64.sys of the component IOCTL Process Termination. Executing a manipulation of the argument Pid can lead to exposed ioctl with insufficient access control. The attack needs to be launched locally. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Yungengxin | Cloud Billing | 2024.11.28.11 | — | No fix listed | CNA |
- Cloud Billing VendorYungengxin Affected 2024.11.28.11 Fixed in — No fix listed CNA
CPE names CNA · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:yungengxin:cloud_billing:*:*:*:*:*:*:*:* | — | — | Yungengxin |
- cpe:2.3:a:yungengxin:cloud_billing:*:*:*:*:*:*:*:* Versions — — ·Yungengxin
Remediation
The sources list no fixed version for Yungengxin Cloud Billing.
Written with Claude Haiku 5.5 from the sources below · 2026-10-29
Timeline
- 2026-10-12 Threatist record created from CVE-2026-108889
- 2026-10-12 Alias added: GHSA-wgpj-m7xc-f5q8
- 2026-10-15 CISA SSVC decision points changed
References
—
More Yungengxin vulnerabilities
- TI-2026-70942 Improper privilege management in Yungengxin Yun Jia Security Guard CVSS 4.0MEDIUM 4.8
Sources
- CVE-2026-108889 · CVE Program
- CVE-2026-108889 · NVD
- FIRST EPSS
- GHSA-wgpj-m7xc-f5q8 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences