Information Disclosure Vulnerability in Chengdu Qilu Technology Ludashi Product
CVE-2026-90503

4.6MEDIUM

Key Information:

Vendor

Chengdu Qilu Technology

Status
Ludashi
Vendor
CVE Published:
13 September 2026

What is CVE-2026-90503?

A security flaw has been identified in the Ludashi software by Chengdu Qilu Technology. This vulnerability resides in the ComputerZ_x64.sys library, specifically within the function sub_11008. An attacker with local access can manipulate the argument PhysicalAddress, potentially leading to unauthorized information disclosure. While the exploit has been made public, the vendor's response to this critical issue remains unaddressed, highlighting the urgency for users to implement protective measures.

Affected Version(s)

Ludashi 6.1026.4715.714

References

https://vuldb.com/vuln/403091
vdb-entrytechnical-description
https://vuldb.com/vuln/403091/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-90503
third-party-advisory

CVSS V4

Score:
4.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Bigcat (VulDB User)
VulDB CNA Team
.