CVE-2026-126785

HIGH 8.8

rmalright TR-VISION HOME IOCTL WFanManager.sys sub_11504 default permission

CVSS Score

8.8

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability has been found in rmalright TR-VISION HOME 2.0.5. Impacted is the function sub_11504 in the library WFanManager.sys of the component IOCTL Handler. Such manipulation leads to incorrect default permissions. The attack must be carried out locally. The vendor was contacted early about this disclosure but did not respond in any way.

CWE	CWE-276 CWE-266
Vendor	rmalright
Product	tr-vision home
Published	Nov 12, 2026

Stay Ahead of the Next One

Get instant alerts for rmalright tr-vision home

Be the first to know when new high vulnerabilities affecting rmalright tr-vision home are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

rmalright / TR-VISION HOME

2.0.5

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/435969 vuldb.com: https://vuldb.com/vuln/435969/cti vuldb.com: https://vuldb.com/cve/CVE-2026-126785 vuldb.com: https://vuldb.com/submit/1040412

Credits

🔍 Element2023H (VulDB User) VulDB CNA Team