CVE-2026-3609

High · 7.8

CVSS

7.8

EPSS

0.2%

Published

May 11, 2026

CISA due date

—

The record

Wellbia's XIGNCODE3 xhunter1.sys kernel driver Privilege Escalation Vulnerability provides access to IRP_MJ_REITS command interface, which allows any user process to request a PROCESS_ALL_ACCESS. Cross reference to KVE 2023-5589 (https://krcert.or.kr)

Affected packages

Ecosystem	Package	Introduced	Fixed