PT-2026-28806 · Gigabyte · Gigabyte Control Center

Published 2026-03-30 · Updated 2026-03-30 · CVE-2026-4415

Mitre

CVSS v3.1

8.1

High

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Gigabyte Control Center developed by GIGABYTE has an Arbitrary File Write vulnerability. When the pairing feature is enabled, unauthenticated remote attackers can write arbitrary files to any location on the underlying operating system, leading to arbitrary code execution or privilege escalation.

Fix

Relative Path Traversal

Weakness Enumeration

CWE-23

Related Identifiers

CVE-2026-4415

Affected Products

Gigabyte Control Center

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-4415 · Security Note
• https://twcert.org.tw/en/cp-139-10804-689cd-2.html · Note
• https://twcert.org.tw/tw/cp-132-10803-ae014-1.html · Note