CVE-2026-18768

CVSS 8.5 (high) · published 2026-11-11

A local low privileged attacker can access arbitrary physical memory or define its mapping via TcRouter.sys because of exposed IOCTL function calls resulting in a full compromise of the affected devices.

Weakness: CWE-782

Source: NVD CVE-2026-18768

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.