Vulnerability in Wibu-Systems-Ag Wibukey

CVE-2026-81579

In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey2_64.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrator shell, or gain full control over the system.

EPSS: 0.002 (5.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-81579?
CVE-2026-81579 is a high-severity vulnerability in Wibu-Systems-Ag Wibukey, classified under Write-what-where Condition. CVSS score: 8.8/10. Published 2026-08-27.
How severe is CVE-2026-81579?
High severity. CVSS v3 base score is 8.8 out of 10.