CVE-2026-108889

Name of the Vulnerable Software and Affected Versions Yungengxin Cloud Billing version 2024.11.28.11

Description A flaw exists in the IOCTL Process Termination component within the LWBilling64.sys library. Specifically, the sub 14000443C() function is susceptible to manipulation of the Pid argument, which can lead to an exposed IOCTL (Input/Output Control) with insufficient access control. This issue requires local access to be exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.