CVE•Published 2026-06-26•Modified 2026-06-29•0 articles on news•5 live references•NVD data

CVE-2026-45195Imaginationtech · Ddk

Vulnerability data via NVD (ingested)

CVSS v3.1

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS percentile

1

Exploit Prediction Scoring System · top 99% of all CVEs

Weaknesses (CWE)

CWE-280Improper Handling of Insufficient Permissions or Privileges

Description

Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory read or write outside the permitted range of memory for the host kernel. Addresses passed to the GPU Firmware can be used by the Firmware for more privileged memory accesses than are permitted by the system.

Timeline

Published 2026-06-26

Modified 2026-06-29

External references

NVD MITRE Exploit-DB GitHub PoC VulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

Shodan · vuln tag0 hosts

vuln:CVE-2026-45195

Hosts Shodan has explicitly fingerprinted as vulnerable.

Shodan · product

product:"Imaginationtech Ddk"

All exposed Imaginationtech Ddk instances — cross-reference with the CVE's affected-version range.

Shodan · banner/body mention

http.html:"Ddk"

HTTP body or banner mentions "Ddk" — catches deploys Shodan didn't identify as a product.

More intel sources (5)

vuln:CVE-2026-45195

Country / ASN / product breakdown for the vuln query.

vulnerabilities.cve_id: CVE-2026-45195

Censys host search filtered to this CVE id.

CVE-2026-45195

Public source-code mentions — fast PoC discovery.

CVE-2026-45195

GitHub code search for direct mentions.

"CVE-2026-45195" exploit -site:nvd.nist.gov

Write-ups and news, NVD excluded.

Known PoCs on GitHub (8)

CVE-2026-451958 repos

Mr-xn/Penetration_Testing_POCHTML

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypas…

★ 7,434·updated today

Threekiii/Awesome-POCJava

一个漏洞 PoC 知识库。A knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.

★ 5,117·updated 2mo ago

eeeeeeeeee-code/POCunknown

备份的漏洞库，3月开始我们来维护

★ 2,111·updated 2w ago

Ostorlab/KEVunknown

Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.

★ 612·updated 1w ago

adysec/POCunknown

wy876 POC | wy876的poc仓库已删库，该项目为其仓库镜像

★ 419·updated 3d ago

Threekiii/CVEunknown

一个 CVE 漏洞预警知识库，无 exp/poc，部分包含修复方案。A knowledge base of CVE security vulnerability, no PoCs/exploits.

★ 175·updated 1w ago

J1ezds/Vulnerability-Wiki-pageHTML

这是一个每天同步Vulnerability-Wiki中docs-base中内容的项目

★ 14·updated 2mo ago

GODofExploit/exploit-arsenalPython

277 standalone dependency-free Python 3 CVE exploits, each validated end-to-end against the real vulnerable software with a write-up and a screenshot of the live run. 86 in the CIS…

★ 2·updated 2d ago

We haven't classified any articles referencing CVE-2026-45195 yet. The external references above still apply.