{"id":"CVE-2026-107091","kind":"vulnerability","aliases":["CVE-2026-107091"],"related":[],"title":"HUION Inspiroy Frego S driver: installer DLL loading lets local attacker run code","description":"An issue in HUION Inspiroy Frego S (L310) Windows Driver 20.0.1.118 allows a local attacker to execute arbitrary code via the HUION driver installer DLL-loading logic","summary":"The HUION Inspiroy Frego S (L310) Windows driver version 20.0.1.118 loads DLLs unsafely in its installer. A local attacker who can place a crafted DLL can execute arbitrary code.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["graphics-tablet","huion","other","windows"],"not_affected_if":["other-driver-version"],"how_to_check":"- Check the installed driver version in Windows Apps & features for HUION driver 20.0.1.118\n- unknown for other detection steps","fix":"- unknown: the sources do not name a fixed driver version or vendor patch","status":"open","published_at":"2026-10-26T17:17:12+00:00","first_seen_at":"2026-10-26T17:31:21+00:00","triaged_at":"2026-10-26T17:33:34+00:00","updated_at":"2026-10-26T17:33:34+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-26T17:33:34Z","model":"claude-haiku-5-5","output":{"fix":"- unknown: the sources do not name a fixed driver version or vendor patch","reach":"local","title":"HUION Inspiroy Frego S driver: installer DLL loading lets local attacker run code","impact":"high","summary":"The HUION Inspiroy Frego S (L310) Windows driver version 20.0.1.118 loads DLLs unsafely in its installer. A local attacker who can place a crafted DLL can execute arbitrary code.","category":"other","nicknames":[],"who_cares":["windows","huion","graphics-tablet"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Local attacker runs arbitrary code on the Windows machine","analyst_note":"Find the vendor advisory or NVD details for the DLL-loading path and the fixed driver version for HUION Inspiroy Frego S (L310).","how_to_check":"- Check the installed driver version in Windows Apps & features for HUION driver 20.0.1.118\n- unknown for other detection steps","needs_analyst":true,"not_affected_if":["other-driver-version"],"who_is_affected":"Windows machines with the HUION Inspiroy Frego S (L310) tablet driver version 20.0.1.118 installed. The sources do not say which DLL paths are involved or whether the installer must be run from a specific location, so exposure beyond that version is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000583,"input_tokens":3293,"output_tokens":508,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-107091':16A,19A '-2026':15A,18A '20.0.1.118':35B,65C 'allow':66C 'arbitrari':53B,72C 'attack':11A,44B,69C 'code':13A,54B,73C 'craft':49B 'cve':14A,17A 'dll':7A,50B,80C 'dll-load':79C 'dlls':37B 'driver':5A,33B,64C,77C 'execut':52B,71C 'frego':3A,29B,60C 'graphic':21B 'graphics-tablet':20B 'huion':1A,23B,27B,58C,76C 'inspiroy':2A,28B,59C 'instal':6A,41B,78C 'issu':56C 'l310':31B,62C 'let':9A 'load':8A,36B,81C 'local':10A,43B,68C 'logic':82C 'place':47B 'run':12A 'tablet':22B 'unsaf':38B 'version':34B 'via':74C 'window':25B,32B,63C","nicknames":[],"mitigations":[],"who_affected":"Windows machines with the HUION Inspiroy Frego S (L310) tablet driver version 20.0.1.118 installed. The sources do not say which DLL paths are involved or whether the installer must be run from a specific location, so exposure beyond that version is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T17:17:12+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-107091","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107091","severity":null,"published_at":"2026-10-26T17:17:12+00:00","modified_at":"2026-10-26T17:17:12+00:00","first_seen_at":"2026-10-26T17:31:21+00:00","fetched_at":"2026-10-26T17:31:21+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}