Insufficient Access Control in Kingston FURY CTRL RGB Control Software
CVE-2026-129261

9.3CRITICAL

Key Information:

Vendor

Kingston

Status
Fury Ctrl Rgb Control Software
Vendor
CVE Published:
14 November 2026

What is CVE-2026-129261?

A vulnerability has been identified within the Kingston FURY CTRL RGB Control Software that allows for improper access control in its IOCTL Handler. The affected library, NTIOLib_X64.sys, exposes an unknown function which can be manipulated by an attacker with local access, potentially leading to unauthorized operations. Users of versions up to 2.0.66.0 should ensure they are aware of this issue and take necessary precautions to secure their systems.

Affected Version(s)

FURY CTRL RGB Control Software 2.0.0

FURY CTRL RGB Control Software 2.0.1

FURY CTRL RGB Control Software 2.0.2

References

https://vuldb.com/vuln/437302
vdb-entry
https://vuldb.com/vuln/437302/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-129261
third-party-advisory

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Element2023H (VulDB User)
VulDB Vulnerability Moderation Team
.