CVE-2026-4416: GIGABYTE Performance Library

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticated local attackers can send a malicious serialized payload to the EasyTune Engine service, resulting in privilege escalation.

Affected products

• GIGABYTE Performance Library: before 25.12.31.01 (fixed in 25.12.31.01)

Published 2026-03-30. Last modified 2026-06-17.