CVE-2026-15476

MEDIUM

CVSS v3.1: 5.3

No user interaction

Source data as of:

At a glance

Severity
MEDIUM
CVSS
5.3 v3.1 · NVD
EPSS
EPSS not provided by FIRST.org for this CVE
CISA KEV
No
Attack conditions (CVSS vector)
No user interaction · Source: NVD Vector
Published
2026-07-12 · Modified: 2026-07-12

CVSS / EPSS / KEV

CVSS v3.1 5.3 / 10 MEDIUM Source: NVD
CVSS v4.0 1.9 / 10 LOW Source: NVD
EPSS EPSS not provided by FIRST.org for this CVE Source: FIRST.org
CISA KEV No Source: CISA

Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources

Description

A security vulnerability has been detected in QILING Disk Master 6.0.0.0. The impacted element is an unknown function in the library diskbckp.sys of the component Kernel Driver. Such manipulation leads to improper access controls. The attack can only be performed from a local environment. The exploit has been disclosed publicly and may be used. It is suggested to upgrade the affected component.

Record details

CVE ID
CVE-2026-15476
CVSS (v3.1)
5.3 (MEDIUM)
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Exploitability subscore
1.8
Impact subscore
3.4
CISA KEV
No
Weakness (CWE)
CWE-266, CWE-284
Affected configurations (CPE)
0
Published
2026-07-12
Modified
2026-07-12
Status
Received

References

Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.