CVE-2026-15476

MEDIUM

QILING Disk Master Kernel Driver diskbckp.sys access control

Title source: cna

Description

A security vulnerability has been detected in QILING Disk Master 6.0.0.0. The impacted element is an unknown function in the library diskbckp.sys of the component Kernel Driver. Such manipulation leads to improper access controls. The attack can only be performed from a local environment. The exploit has been disclosed publicly and may be used. It is suggested to upgrade the affected component.

References (6)

Core 6

Core References

Vdb Entry vdb-entry

VDB-377781 | QILING Disk Master Kernel Driver diskbckp.sys access control

https://vuldb.com/vuln/377781

Signature, Permissions Required signature permissions-required

VDB-377781 | CTI Indicators (IOB, IOC, TTP, IOA)

https://vuldb.com/vuln/377781/cti

Third Party Advisory third-party-advisory

CVE-2026-15476 | CVE Analysis and Report

https://vuldb.com/cve/CVE-2026-15476

Third Party Advisory third-party-advisory

Submit #835610 | QILING Disk Master Kernel Driver diskbckp.sys 6, 0, 0, 0 Local Privilege Escapation

https://vuldb.com/submit/835610

Exploit exploit

https://winslow1984.com/books/cve-collection/page/qiling-disk-master-kernel-driver-diskbckpsys-6-0-0-0-local-privilege-escalation

Patch patch

https://www.idiskhome.com/download/beta/multi_DiskMaster_Pro_Trial.exe

Scores

CVSS v3 5.3

EPSS 0.0011

EPSS Percentile 1.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-266 CWE-284

Status published

Products (1)

QILING/Disk Master 6.0.0.0

Published Jul 12, 2026

Tracked Since Jul 12, 2026