CVE-2026-82876

HIGH 8.2

Phison PS3111-S11 Controller Firmware Signature Verification Bypass

CVSS Score

8.2

EPSS Score

0.0%

EPSS Percentile

0th

Phison PS3111-S11 controller firmware verifies RSA signatures using a public modulus embedded within the firmware image itself rather than anchored in immutable storage. Attackers can generate arbitrary RSA key pairs, sign modified firmware with the private key, embed the matching modulus in the signature segment, and the controller accepts the tampered firmware as valid.

CWE	CWE-347
Vendor	phison electronics corporation
Product	ps3111-s11 controller firmware
Published	Aug 31, 2026

Stay Ahead of the Next One

Get instant alerts for phison electronics corporation ps3111-s11 controller firmware

Be the first to know when new high vulnerabilities affecting phison electronics corporation ps3111-s11 controller firmware are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

Phison Electronics Corporation / PS3111-S11 Controller Firmware

SBFQT1.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

trulycrisp.github.io: https://trulycrisp.github.io/drivefirmware/phison_s11/ github.com: https://github.com/trulycrisp/psychite vulncheck.com: https://www.vulncheck.com/advisories/phison-ps3111-s11-controller-firmware-signature-verification-bypass

Credits

Michael Herbert