VulnSocial

CVE-2026-94403Disclosure

LOWCVSS 8.5 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub_140001AF0 in the library ene.sys of the component IOCTL Handler. This manipulation causes untrusted pointer dereference. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Back to dashboard
2.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-822

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-09-21); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-21: 1Mentions · 2026-10-16: 1PoC Mentioned / Linked · 2026-10-16: 1Patch / Workaround · 2026-10-16: 1Technical Details · 2026-09-21: 1Technical Details · 2026-10-16: 109-2110-16
Signal classification2 categories
Disclosure
150.0%
PoC
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-211
Disclosure1
2026-10-161
PoC1
Full discourse2 posts
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    PoC

    CVE-2026-94403: ColorFul iGameCenter driver ene.sys untrusted pointer deref, local exploit public, no patch. CVSS 8.8. Uninstall or restrict access now. https://www.valtersit.com/cve/CVE-2026-94403/ #CVE #infosec #cybersecurity #ColorFul #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker

    Post summary

    The tweet discloses CVE-2026-94403 with technical details (untrusted pointer dereference, CVSS 8.8), notes that a local exploit is publicly available, and recommends uninstalling or restricting access as a mitigation measure.

    0000043
    1.1K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-94403 A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub_140001AF0 in the library ene.sys of the component IOCTL Handler. This ma… https://www.cve.org/CVERecord?id=CVE-2026-94403

    Post summary

    The tweet announces the disclosure of CVE‑2026‑94403, a weakness in ColorFul iGameCenter 1.0.3.4 affecting the IOCTL handler's ene.sys library, providing limited technical details but no further information on PoCs, exploits, active exploitation, or patches.

    000001.1K
    58.1K followersView on X

Explore more

Back to dashboard