Dashboard / CVE-2026-109836

CVE-2026-109836

HIGH
MEDIUM Priority: 0.01 BB Relevance: 37/100
Published: 2026-11-03 Modified: 2026-11-06 First seen: 2026-11-03 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: High
UI: None
S: X
AT: None
VC: High
VI: High
VA: High

Description

The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow physical memory to be read or written.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
ALCPU Core Temp 0 < 1.21
ALCPU Core Temp 0 < 1.21

References & Advisories (2)

Bug Bounty Relevance

37 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

8.4 / 10.0 v4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.12%
Raw Score 0.001220
Percentile 2.0%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00122
2026-11-13
0.00122
2026-11-12
0.00122
2026-11-10
0.00122
2026-11-09
0.00122
2026-11-08
0.00122
2026-11-07
0.00122
2026-11-06
0.00122
2026-11-05
0.00122
2026-11-04
0.00122

Intelligence Sources

mitre ref →
nvd ref →

External Links