{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/rmalright/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:rmalright:tr_vision_home:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-126785"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["TR-VISION HOME"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["rmalright"],"content_html":"\u003cp\u003eA vulnerability has been identified in rmalright TR-VISION HOME 2.0.5. The flaw is located in the function sub_11504 within the WFanManager.sys library of the IOCTL Handler component. This issue results in incorrect default permissions. Exploitation requires local access to the system.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful manipulation of the affected component leads to incorrect default permissions.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eMonitor the environment for any unauthorized interaction with the identified driver.\u003c/p\u003e\n","date_modified":"2026-11-12T02:09:10Z","date_published":"2026-11-12T02:09:10Z","id":"https://feed.craftedsignal.io/briefs/2026-11-tr-vision-home-permission-vulnerability-cve-2026-126785/","summary":"A vulnerability in the WFanManager.sys library of rmalright TR-VISION HOME 2.0.5 results in incorrect default permissions within the component's IOCTL handler.","title":"rmalright TR-VISION HOME: Incorrect default permissions vulnerability (CVE-2026-126785)","url":"https://feed.craftedsignal.io/briefs/2026-11-tr-vision-home-permission-vulnerability-cve-2026-126785/"}],"language":"en","title":"CraftedSignal Threat Feed - Rmalright","version":"https://jsonfeed.org/version/1.1"}