The vulnerability in Wellbia's XIGNCODE3 Anti-Cheat (version 10.0.10011.16384) involves the xhunter1.sys kernel driver exposing the IRP_MJ_REITS command interface. This interface permits any user-level process to request PROCESS_ALL_ACCESS, which grants full access rights to processes. This represents a failure in privilege management controls, allowing privilege escalation from a lower-privileged user process to potentially full system-level access. The vulnerability is documented under CVE-2026-3609 and is associated with multiple CWE categories related to improper access control and privilege management. No CVSS score or remediation level is currently available, and no patch links have been published.

If exploited, this vulnerability could allow an unprivileged user process to escalate its privileges by obtaining PROCESS_ALL_ACCESS rights, potentially leading to unauthorized control over other processes or system components. This could compromise system integrity and security. However, there are currently no known exploits in the wild, and no official patch or mitigation has been announced.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No vendor advisory or official remediation instructions are currently available.