CVE•Published 2026-08-31•Modified 2026-09-10•1 article on news•5 live references•NVD data
CVE-2026-82876
Vulnerability data via NVD (ingested)
CVSS v3.1
8.2
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS percentile
0
Exploit Prediction Scoring System · top 100% of all CVEs
Weaknesses (CWE)
Description
Phison PS3111-S11 controller firmware verifies RSA signatures using a public modulus embedded within the firmware image itself rather than anchored in immutable storage. Attackers can generate arbitrary RSA key pairs, sign modified firmware with the private key, embed the matching modulus in the signature segment, and the controller accepts the tampered firmware as valid.
Timeline
Published 2026-08-31
Modified 2026-09-10
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common). Live host counts are a Premium feature.
More intel sources (5)
Shodan report
vuln:CVE-2026-82876Country / ASN / product breakdown for the vuln query.
Censys
vulnerabilities.cve_id: CVE-2026-82876Censys host search filtered to this CVE id.
grep.app
CVE-2026-82876Public source-code mentions — fast PoC discovery.
GitHub code
CVE-2026-82876GitHub code search for direct mentions.
Google dork
"CVE-2026-82876" exploit -site:nvd.nist.govWrite-ups and news, NVD excluded.