CVE-2026-84854: Wibu-Systems-AG Wibukey

High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days.

In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent kernel memory may be modified.

Affected products

• Wibu-Systems-AG Wibukey: before 6.72 (fixed in 6.72)

Published 2026-10-06. Last modified 2026-10-07.