CVE Intelligence

Vulnerabilidades de Wellbia

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Wellbia: 2 registro(s), com severidade, exploração e correções.

Xigncode3 2

Somente exploradas (KEV) →

CVE-2026-15430 Média · 6.2 CWE-269 03/08/2026
CVE-2026-15430
Improper access control in the IRP_MJ_WRITE command interface in Wellbia XIGNCODE3 xhunter2.sys, version 2026.6.1.192, allows a local, unprivileged attacker to achieve local privilege escalation to NT AUTHORITY\SYSTEM, extract credentials from PPL-protected lsass.exe, and terminate PPL-protected security processes.
CVE-2026-3609 Alta · 7.8 11/05/2026
XIGNCODE3 xhunter1.sys kernel driver contains a Privilege Escalation Vulnerability
Wellbia's XIGNCODE3 xhunter1.sys kernel driver, version 10.0.10011.16384 through 2023.12.7.78, privilege escalation vulnerability provides access to the IRP_MJ_WRITE command interface, which allows any user process to request a PROCESS_ALL_ACCESS. Note: KVE 2023-5589 (https://krcert.or.kr) was initially issued for version 10.0.10011.16384, but the vulnerability was not fully remediated and remains in version 2023.12.7.78.