HIGH

CVE-2026-19191

2026-08-07 CVSS v3.1

CVSS

7.8

Description

A security vulnerability has been detected in StableBit DrivePool 2.3.13.1687. This vulnerability affects unknown code of the file C:\Program Files\StableBit\DrivePool\DrivePool.Service.exe of the component DrivePoolService. Such manipulation leads to permission issues. The attack must be carried out locally. The exploit has been disclosed publicly and may be used.

Weakness (CWE)

CWE-266 Incorrect Privilege Assignment

CWE-275

EPSS Score

0.11%

Probability of exploitation in next 30 days

1.4th percentile

References

https://vuldb.com/cve/CVE-2026-19191 https://vuldb.com/submit/864539 https://vuldb.com/vuln/386709 https://vuldb.com/vuln/386709/cti https://winslow1984.com/books/cve-collection/page/stablebit-drivepool-23131687-local-privilege-escalation-via-insecure-deserialization

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE