Description
A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the function sub_23908 in the library shield.sys of the component Kernel Driver. Such manipulation leads to memory corruption. The attack can only be performed from a local environment. The exploit is publicly available and might be used. A fix is planned for the upcoming release.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Horizon DataSys | Reboot Restore Standard | 13.0, 13.1, 13.2 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 2 repositories
-
Element2023H/CVE-2026-120232 ★ 2 · Sep 26, 2026
-
Element2023H/CVE-2026-120232-RUST-POC ★ 1 · Nov 5, 2026
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- VDB-429591 | Horizon DataSys Reboot Restore Standard Kernel Driver shield.sys sub_23908 memory corruption vdb-entry technical-description
- VDB-429591 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-120232 | CVE Analysis and Report third-party-advisory
- Submit #1001497 | Horizon DataSys Reboot Restore Standard v13.2 (and prior) Improper Input Validation third-party-advisory
- https://gist.github.com/Element2023H/a176865b1f4015e003620154f3ba103c exploit