CVE-2026-108889
Received Received - Intake

Exposed IOCTL with Insufficient Access Control in Yungengxin Cloud Billing

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: VulDB

Description
A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affected by this vulnerability is the function sub_14000443C in the library LWBilling64.sys of the component IOCTL Process Termination. Executing a manipulation of the argument Pid can lead to exposed ioctl with insufficient access control. The attack needs to be launched locally. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-12
Last Modified
2026-10-12
Generated
2026-10-12
AI Q&A
2026-10-12
EPSS Evaluated
N/A
NVD
CVE-2026-108889
EUVD
EUVD-2026-97368

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Yungengxin Cloud Billing 2024.11.28.11

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-782 The product implements an IOCTL with functionality that should be restricted, but it does not properly enforce access control for the IOCTL.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in Yungengxin Cloud Billing 2024.11.28.11, specifically in the function sub_14000443C within the LWBilling64.sys library. It involves insufficient access control in an IOCTL process termination function. An attacker can manipulate the Pid argument to exploit exposed ioctl functionality. The attack requires local access and an exploit has been publicly disclosed.

Detection Guidance

This vulnerability requires local access and involves insufficient access control in the IOCTL handler of LWBilling64.sys. Detection may involve inspecting running processes for unusual activity related to the library or monitoring for unexpected termination requests. No specific commands are provided in the context.

Impact Analysis

If you use Yungengxin Cloud Billing 2024.11.28.11, an attacker with local access could terminate processes improperly, potentially causing system instability or denial of service. Since the exploit is public, the risk of misuse is higher. However, the impact is limited due to local access requirements and low CVSS scores.

Compliance Impact

This vulnerability involves insufficient access control in a local component (IOCTL Process Termination) of Yungengxin Cloud Billing, allowing manipulation of the Pid argument. While it does not directly impact data protection standards like GDPR or HIPAA, insufficient access control could lead to unauthorized system modifications, potentially compromising data integrity or confidentiality if exploited. However, the vulnerability's local attack vector and limited impact (CVSS 1.9-4.4) suggest minimal direct compliance risk.

Mitigation Strategies

Since the vulnerability requires local access and involves insufficient access control in the IOCTL handler of LWBilling64.sys, immediate steps include uninstalling or disabling the Yungengxin Cloud Billing software until a patch is available. Monitor vendor communications for updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-108889. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart