Vulnerabilities

TI-2026-15395 CVE-2026-18794 · GHSA-2hph-9m2g-p27v

OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite

MEDIUM 44

The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00425 Published 2026-08-26 No fix listed CWE-1288

TI-2026-42560 CVE-2026-59683 · GHSA-3c7q-x53x-mrfx

MEDIUM 49

The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths (extension of CVE-2026-59682).

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00553 Published 2026-08-26 No fix listed CWE-73

TI-2026-42559 CVE-2026-59682 · GHSA-26mm-mg9c-fjp5

MEDIUM 45

Arbitrary file overwrite via SAVE_PROFILE message in OpenRGB.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00501 Published 2026-08-26 No fix listed CWE-73