CVE-2026-15476 Details
Description
A security vulnerability has been detected in QILING Disk Master 6.0.0.0. The impacted element is an unknown function in the library diskbckp.sys of the component Kernel Driver. Such manipulation leads to improper access controls. The attack can only be performed from a local environment. The exploit has been disclosed publicly and may be used. It is suggested to upgrade the affected component.
A local privilege escalation vulnerability has been identified in QILING Disk Master Free version 6.0.0.0. The issue arises in the kernel driver 'diskbckp.sys', which improperly manages access controls. This vulnerability allows standard local users to exploit the driver by writing raw sectors to selected disks, bypassing normal Windows access restrictions. The exploitation can tamper with protected files and other privileged filesystem metadata.
To address this vulnerability, it is recommended to implement a restrictive security descriptor for the driver device, ensuring that standard users cannot access the raw disk interface. Additionally, any IOCTLs that involve disk contexts or raw disk operations should require administrative privileges, and all caller-controlled parameters should be validated to prevent unauthorized access.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 12, 2026CISA-ADP
Assessed Jul 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://vuldb.com/cve/CVE-2026-15476 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/835610 | [email protected] | Issue TrackingPermission Required |
| https://vuldb.com/vuln/377781 | [email protected] | Content Wall |
| https://vuldb.com/vuln/377781/cti | [email protected] | Content Wall |
| https://winslow1984.com/books/cve-collection/page/qiling-disk-master-kernel-driver-diskbckpsys-6-0-0-0-local-privilege-escalation | [email protected] | ExploitRemedyTechnical Description |
| https://www.idiskhome.com/download/beta/multi_DiskMaster_Pro_Trial.exe | [email protected] | Broken LinkVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-266 | Incorrect Privilege Assignment | [email protected] |
| CWE-284 | Improper Access Control | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| QILING Disk Master Free | 6.0.0.0 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 13, 2026 | CVE Modified | CISA-ADP |
| Jul 12, 2026 | New CVE Received | [email protected] |