CVE-2026-36355

The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions through v3.4.14B) does not perform any access control checks on the write_mem (ioctl 0x89F5) and read_mem (ioctl 0x89F6) debug handlers, which are compiled into production builds via the unconditionally defined _IOCTL_DEBUG_CMD_ macro in 8192cd_cfg.h

CVSS v3.1

7.7 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

0.67% chance of exploitation in the next 30 days, 49th percentile

Published

2026-05-05

Updated

2026-07-05

Proof-of-concept exploits (1)

• totekuh/CVE-2026-363550★ · 2026-05-03

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/52580

References

• CVE Record
• NVD entry

Related

• CVE-2026-36356
• CVE-2026-75616
• CVE-2026-36341
• CVE-2026-36340
• CVE-2026-36358
• CVE-2026-36239