CalcProgrammer1 vulnerabilities

Products

• OpenRGB 3

Latest CalcProgrammer1 CVEs

Newest publication first

1. CVE-2026-18794 OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite

   Published 2026-08-26

   High·CVSS 8.8

   The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data.

2. CVE-2026-59683 OpenRGB: local and remote system compromise via arbitrary file write using attacker controlled strings

   Published 2026-08-26

   Critical·CVSS 9.3

   The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths (extension of CVE-2026-59682). This allows either a full system compromise from local or remote (if the daemon is running as root) or a full account takeover (if the daemon i...

3. CVE-2026-59682 Arbitrary file overwrite and deletion local and remote in OpenRGB

   Published 2026-08-26

   High·CVSS 8.8

   Arbitrary file overwrite via SAVE_PROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.