CVE-2026-4415 in GIGABYTE Control Center
Summary
Gigabyte Control Center developed by GIGABYTE has an Arbitrary File Write vulnerability. When the pairing feature is enabled, unauthenticated remote attackers can write arbitrary files to any location on the underlying operating system, leading to arbitrary code execution or privilege escalation.
Responsible
twcert
Reservation
03/19/2026
Disclosure
03/30/2026
Entries
| ID | Vulnerability | CWE | Base | Temp | 0day | Today | Exp | KEV | EPSS | CTI | Cou | CVE |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 354159 | GIGABYTE Control Center path traversal | 23 | 8.1 | 8.1 | $0-$5k | $0-$5k | Not defined | possible | 0.00000 | 8.64 | Not defined | CVE-2026-4415 |