rmalright TR-VISION HOME: Incorrect default permissions vulnerability (CVE-2026-126785)
A vulnerability in the WFanManager.sys library of rmalright TR-VISION HOME 2.0.5 results in incorrect default permissions within the component's IOCTL handler.
CVE search metadata
CVE search record: CVE-2026-126785. Severity: high. CVSS: 8.8. KEV: no. Product: TR-VISION HOME. Brief: rmalright TR-VISION HOME: Incorrect default permissions vulnerability (CVE-2026-126785). Brief link: https://feed.craftedsignal.io/briefs/2026-11-tr-vision-home-permission-vulnerability-cve-2026-126785/
Triage facts
Revision 1- Applicability
- TR-VISION HOME
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 12, 02:09 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A vulnerability has been identified in rmalright TR-VISION HOME 2.0.5. The flaw is located in the function sub_11504 within the WFanManager.sys library of the IOCTL Handler component. This issue results in incorrect default permissions. Exploitation requires local access to the system.
Impact
Successful manipulation of the affected component leads to incorrect default permissions.
Recommendation
Monitor the environment for any unauthorized interaction with the identified driver.