VulnSocial

CVE-2026-14960Patch

MEDIUMCVSS 9.8 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Patch affected systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

Pegatron `Tdelo64.sys` improperly exposes privileged hardware access functionality through the `\\.\TdeIo` device interface. IOCTL handlers including `TDE_IOCTL_INDEXIO_READ` and `TDE_IOCTL_INDEXIO_WRITE` permit unprivileged user-mode callers to perform arbitrary hardware I/O port reads and writes without authorization checks. A local attacker can abuse this functionality to manipulate hardware registers, tamper with firmware-related interfaces, cause system instability, or establish persistent low-level compromise.

Back to dashboard
4.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-269CWE-284CWE-668

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-17: 1Active Exploitation · 2026-07-17: 1Patch / Workaround · 2026-07-17: 1Technical Details · 2026-07-17: 107-17
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • ExploitGrid@exploitgrid
    Patch

    🚨 Patch SonicWall SMA1000 now — CVE-2026-15409 (CVSS 10.0 SSRF) is being exploited in the wild, now in CISA's KEV. Also this week: CVE-2026-13001 (Podlove WP plugin RCE, 9.8), CVE-2026-14960 (Pegatron driver LPE, 9.8), MSFT Patch Tuesday. For more: http://exploitgrid.net

    Post summary

    The tweet alerts users to patch SonicWall SMA1000 for CVE-2026-15409, an SSRF flaw that is actively exploited and listed in CISA's KEV, and also highlights other high‑severity CVEs with additional details available at ExploitGrid.

    0101060
    26 followersView on X

Explore more

Back to dashboard