Vulnerabilidades do Wellbia Xigncode3
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Wellbia Xigncode3: 2 registro(s), com versões afetadas e correções.cpe:2.3:a:wellbia:xigncode3
CVE-2026-15430
Média · 6.2
CWE-269 03/08/2026
CVE-2026-15430
Improper access control in the IRP_MJ_WRITE command interface in
Wellbia XIGNCODE3 xhunter2.sys, version 2026.6.1.192, allows a local, unprivileged attacker to achieve local privilege escalation to
NT AUTHORITY\SYSTEM, extract credentials from PPL-protected
lsass.exe, and terminate PPL-protected security processes.
CVE-2026-3609
Alta · 7.8
11/05/2026
XIGNCODE3 xhunter1.sys kernel driver contains a Privilege Escalation Vulnerability
Wellbia's XIGNCODE3 xhunter1.sys kernel driver, version 10.0.10011.16384 through 2023.12.7.78, privilege escalation vulnerability provides access to the IRP_MJ_WRITE command interface, which allows any user process to request a PROCESS_ALL_ACCESS.
Note: KVE 2023-5589 (https://krcert.or.kr) was initially issued for version 10.0.10011.16384, but the vulnerability was not fully remediated and remains in version 2023.12.7.78.