What’s Vulnerable › Vulnerabilities

CVE-2026-19191: StableBit DrivePool DrivePoolService DrivePool.Service.exe permission

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-07 · updated 2026-10-23
• Weakness: CWE-266

Description

A security vulnerability has been detected in StableBit DrivePool 2.3.13.1687. This vulnerability affects unknown code of the file C:\Program Files\StableBit\DrivePool\DrivePool.Service.exe of the component DrivePoolService. Such manipulation leads to permission issues. The attack must be carried out locally. The exploit has been disclosed publicly and may be used.

Affected products

• StableBit DrivePool: 2.3.13.1687

References

• https://vuldb.com/cve/CVE-2026-19191
• https://vuldb.com/submit/864539
• https://vuldb.com/vuln/386709
• https://vuldb.com/vuln/386709/cti
• https://winslow1984.com/books/cve-collection/page/stablebit-drivepool-23131687-local-privilege-escalation-via-insecure-deserialization

Get alerted when CVE-2026-19191 or the next vulnerability affects your stack