技嘉｜MacroHub - Local Privilege Escalation

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.gigabyte.com/us/Support/Security/2362
• https://www.twcert.org.tw/en/cp-139-10702-b40aa-2.html
• https://github.com/advisories/GHSA-6cgp-hmjx-r8fx
• https://nvd.nist.gov/vuln/detail/CVE-2026-0870
• https://www.cve.org/CVERecord?id=CVE-2026-0870
• https://cvefeed.io/vuln/detail/CVE-2026-0870
• https://vulnerability.circl.lu/vuln/cve-2026-0870
• https://www.gigabyte.com/Support/Security
• https://www.twcert.org.tw/tw/cp-132-10701-fc9e0-1.html

Related Vulnerabilities

• PoCCVE-2026-29962: HSC MailInspector - Local File Inclusion
• PoCCVE-2026-85200: GEO my WP <=4.5.5.3 - Unauthenticated Local File Inclusion
• PoCCVE-2026-55229: Gotenberg < 8.34.0 - Local File Disclosure
• PoCCVE-2026-7467: Read More & Accordion <= 3.5.7 - Authenticated Privilege Escalation
• PoCCVE-2025-14998: Branda WordPress plugin - Privilege Escalation
• PoCCVE-2025-15403: RegistrationMagic <= 6.0.7.1 - Privilege Escalation
• PoCCVE-2026-11387: SMS Alert – SMS & OTP for WooCommerce - Privilege Escalation
• PoCCVE-2026-19598: Pods <= 3.3.9 - Unauthenticated Privilege Escalation via pods_admin AJAX Router
• PoCCVE-2026-12394: WordPress MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation
• PoCCVE-2026-17594: Sonatype Nexus Repository < 3.95.0 - Privilege Escalation via Repository Format Mismatch
• PoCCVE-2024-57726: SimpleHelp <= 5.5.7 - Privilege Escalation
• PoCCVE-2026-26217: Crawl4AI < 0.8.0 - Local File Inclusion
• PoCharman-media-suite-lfi: Harman Media Suite <= 4.2.0 - Local File Disclosure