CVE-2026-90891
MEDIUM
NVD
CVSS Score
5.5
Severity
MEDIUM
Published
Sep 14, 2026
Vendor
unknown
Description
ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Improper Access Control vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to write to improperly restricted I/O ports, resulting in a forced operating system reboot.