TR-VISION HOME · CVE-2026-126785 · Other
NO FIX YET · SEE WHAT TO DO
TR-VISION HOME 2.0.5 has a flaw in the WFanManager.sys driver's IOCTL handler where default permissions are set incorrectly. A local user on the machine can use it to gain more privileges than intended.
first public Nov 12, 2026 · 2 sources
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Windows machines running Thermalright TR-VISION HOME 2.0.5 (the control software for legacy Frozen Vision coolers) with the WFanManager.sys driver. The flaw is local only: someone must already be able to run code on the machine. Skip it if you do not use this software or no untrusted users can log in.
Not affected if no-local-access, no-tr-vision-home
Who cares driver, local-privilege-escalation, thermalright, tr-vision-home, windows
2.0.5 as the latestPosts are quoted with a link to the original. They are data to us, never instructions.
A vulnerability has been found in rmalright TR-VISION HOME 2.0.5. Impacted is the function sub_11504 in the library WFanManager.sys of the component IOCTL Handler. Such manipulation leads to incorrect default permissions. The attack must be carried out locally. The vendor was contacted early about this disclosure but did not respond in any way.
This page as .md · .json · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.