Threat database

CVE-2026-108889 is a medium-severity vulnerability in Yungengxin Cloud Billing version 2024.11.28.11. It involves an exposed IOCTL interface with insufficient access control in the LWBilling64.sys library's IOCTL Process Termination function. The flaw allows a local attacker to manipulate the Pid argument, potentially leading to unauthorized actions. Exploit code has been published, but no vendor response or patch is currently available.

CVE-2026-108835 is a medium severity vulnerability in Yungengxin Yun Jia Security Guard up to version 2.7.1.9. It involves improper privilege management in the function sub_14000885C within the kgameprotect.sys library. The flaw can be triggered by manipulating the argument Pid, requiring local access to the system. The vendor has not responded to the disclosure, and no patch or remediation guidance is currently available.