Dashboard / CVE-2026-120232

CVE-2026-120232

HIGH 1 PoC
MEDIUM Priority: 0.02 BB Relevance: 52/100
Published: 2026-11-01 Modified: 2026-11-02 First seen: 2026-11-01 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: X
AT: None
VC: High
VI: High
VA: High

Description

A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the function sub_23908 in the library shield.sys of the component Kernel Driver. Such manipulation leads to memory corruption. The attack can only be performed from a local environment. The exploit is publicly available and might be used. A fix is planned for the upcoming release.

Weakness Classification (1)

Affected Software (6)

VendorProductVersion
Horizon DataSys Reboot Restore Standard 13.0
Horizon DataSys Reboot Restore Standard 13.1
Horizon DataSys Reboot Restore Standard 13.2
Horizon DataSys Reboot Restore Standard 13.0
Horizon DataSys Reboot Restore Standard 13.1
Horizon DataSys Reboot Restore Standard 13.2

References & Advisories (5)

Proof of Concept (1)

★ 1
https://github.com/Element2023H/CVE-2026-120232
nomi-sec

Bug Bounty Relevance

52 / 100
✓ Low complexity
✓ No user interaction
✓ PoC available (1)

CVSS Score

8.5 / 10.0 v4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.23%
Raw Score 0.002300
Percentile 13.9%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00230
2026-11-12
0.00230
2026-11-10
0.00230
2026-11-09
0.00230
2026-11-08
0.00230
2026-11-07
0.00230
2026-11-06
0.00230
2026-11-05
0.00230
2026-11-04
0.00230
2026-11-03
0.00230
2026-11-02
0.00230

Intelligence Sources

mitre ref →
nvd ref →

External Links