PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-59682 CalcProgrammer1 CVE debrief

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-26T10:16:40.893Z and has not been modified since then. This vulnerability affects OpenRGB through version 1.0rc3, allowing for arbitrary file overwrite via the SAVE_PROFILE message. The vulnerability has a high CVSS score of 8.8, indicating a high severity level. The CVSS vector is CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. System administrators and users of OpenRGB should be aware of this vulnerability and take necessary precautions to mitigate the risk. Evidence is limited; primary official records indicate an arbitrary file overwrite vulnerability via SAVE_PROFILE message in OpenRGB through 1.0rc3. Further verification is necessary to determine the full scope of affected systems and potential impact.

Vendor
CalcProgrammer1
Product
OpenRGB
CVSS
HIGH 8.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-08-26
Original CVE updated
2026-09-01
Advisory published
2026-08-26
Advisory updated
2026-09-01

Who should care

System administrators and users of OpenRGB, especially those using version 1.0rc3 or earlier, should be aware of this vulnerability and take necessary precautions to mitigate the risk.

Technical summary

The OpenRGB software is vulnerable to an arbitrary file overwrite via the SAVE_PROFILE message. This issue affects OpenRGB through version 1.0rc3. The vulnerability has a high CVSS score of 8.8, indicating a high severity level. The CVSS vector is CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X.

Defensive priority

High-priority vulnerability in OpenRGB, requiring immediate attention due to its high CVSS score of 8.8 and potential for arbitrary file overwrite.

Recommended defensive actions

  • Verify OpenRGB version and ensure it is not vulnerable (version 1.0rc3 or earlier)
  • Implement compensating controls to restrict SAVE_PROFILE message handling
  • Monitor system logs for suspicious activity related to OpenRGB
  • Consider applying vendor remediation if available

Evidence notes

Evidence is limited; primary official records indicate an arbitrary file overwrite vulnerability via SAVE_PROFILE message in OpenRGB through 1.0rc3. Further verification is necessary to determine the full scope of affected systems and potential impact.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-59682 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-59682

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-59682 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-59682

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.