Vulnerability in Wibu-Systems-Ag Wibukey
CVE-2026-81579
In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey2_64.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrator shell, or gain full control over the system.
EPSS: 0.002 (5.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.
Affected products
Weakness classification (CWE)
References
- 2fc02b1f-71e7-4514-a878-169626f68903 (vendor-advisory)
Frequently asked questions
- What is CVE-2026-81579?
- CVE-2026-81579 is a high-severity vulnerability in Wibu-Systems-Ag Wibukey, classified under Write-what-where Condition. CVSS score: 8.8/10. Published 2026-08-27.
- How severe is CVE-2026-81579?
- High severity. CVSS v3 base score is 8.8 out of 10.