CVE-2025-66678

Critical · 9.8

CVSS

9.8

EPSS

0.7%

Published

Mar 4, 2026

CISA due date

—

The record

An issue in the HwRwDrv.sys component of Nil Hardware Editor Hardware Read & Write Utility v1.25.11.26 and earlier allows attackers to execute arbitrary read and write operations via a crafted request.

Affected packages

Ecosystem	Package	Introduced	Fixed