Local Privilege Escalation in TcRouter.sys by Vendor Affecting Multiple Devices
CVE-2026-18767
8.5HIGH
What is CVE-2026-18767?
A vulnerability in TcRouter.sys allows a local attacker with low privileges to exploit exposed IOCTL function calls. This can lead to unauthorized access to I/O ports and potentially result in full compromise of the affected devices. Attackers could leverage this weakness to execute malicious actions, highlighting the need for timely updates and security measures.
Affected Version(s)
TcRouter.sys for Windows on x64 <3.1.0.2365 1.0.0 < 3.1.0.2365
TcRouter.sys for Windows on x64 3.1.0.2364 3.1.0.2364
TcRouter.sys for Windows on x86 <3.1.0.2365 1.0.0 < 3.1.0.2365
References
CVSS V4
Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Chi Siang Choo from 4rthur Security Team
Julian Horoszkiewicz
Patrick Saif