CVE-2026-15476
QILING Disk Master Kernel Driver diskbckp.sys access control
CVSS Score
5.3
EPSS Score
0.1%
EPSS Percentile
1th
A security vulnerability has been detected in QILING Disk Master 6.0.0.0. The impacted element is an unknown function in the library diskbckp.sys of the component Kernel Driver. Such manipulation leads to improper access controls. The attack can only be performed from a local environment. The exploit has been disclosed publicly and may be used. It is suggested to upgrade the affected component.
| CWE | CWE-284 CWE-266 |
| Vendor | qiling |
| Product | disk master |
| Published | Jul 12, 2026 |
| Last Updated | Jul 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for qiling disk master
Be the first to know when new medium vulnerabilities affecting qiling disk master are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
QILING / Disk Master
6.0.0.0
References
vuldb.com: https://vuldb.com/vuln/377781 vuldb.com: https://vuldb.com/vuln/377781/cti vuldb.com: https://vuldb.com/cve/CVE-2026-15476 vuldb.com: https://vuldb.com/submit/835610 winslow1984.com: https://winslow1984.com/books/cve-collection/page/qiling-disk-master-kernel-driver-diskbckpsys-6-0-0-0-local-privilege-escalation idiskhome.com: https://www.idiskhome.com/download/beta/multi_DiskMaster_Pro_Trial.exe
Credits
🔍 winslow1984 (VulDB User)