CVE-2026-9492 is an improper access control vulnerability in the MBStorage DRAM lighting control module within Gigabyte Control Center. The vulnerability allows authenticated local attackers to send specific IOCTL commands through the MyPortIO_x64.sys driver, enabling arbitrary physical memory read and write operations. This can lead to escalation to kernel-level privileges. The vulnerability is identified as CWE-782 (Exposed IOCTL with insufficient access control). The CVSS 4.0 base score is 8.5, indicating high severity. No vendor advisory or patch information is currently available.

Successful exploitation allows authenticated local attackers to perform arbitrary physical memory read and write operations, resulting in kernel-level privilege escalation. This can compromise the entire system's security, enabling attackers to bypass security controls and execute arbitrary code at the highest privilege level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious activity related to the Gigabyte Control Center and its drivers. Avoid running untrusted code with local user privileges.