Description
A vulnerability was found in Kingston FURY CTRL RGB Control Software up to 2.0.66.0. The impacted element is an unknown function in the library NTIOLib_X64.sys of the component IOCTL Handler. Performing a manipulation results in exposed ioctl with insufficient access control. The attack is only possible with local access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kingston | FURY CTRL RGB Control Software | 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16, 2.0.17, 2.0.18, 2.0.19, 2.0.20, 2.0.21, 2.0.22, 2.0.23, 2.0.24, 2.0.25, 2.0.26, 2.0.27, 2.0.28, 2.0.29, 2.0.30, 2.0.31, 2.0.32, 2.0.33, 2.0.34, 2.0.35, 2.0.36, 2.0.37, 2.0.3… | — |
References
- VDB-437302 | Kingston FURY CTRL RGB Control Software IOCTL NTIOLib_X64.sys exposed ioctl with insufficient access control vdb-entry
- VDB-437302 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-129261 | CVE Analysis and Report third-party-advisory
- Submit #1043190 | Kingston FURY CTRL 2.0.66.0 Exposed IOCTL with Insufficient Access Control third-party-advisory