What is the CVSS score of CVE-2026-0870?

CVE-2026-0870 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

How to fix or mitigate CVE-2026-0870?

Within 24 hours: Identify all systems running MacroHub and restrict local administrative access to trusted users only; audit recent user activities on affected systems. Within 7 days: Disable MacroHub if not operationally critical, or isolate affected systems from sensitive networks; communicate findings to asset owners and affected departments. Within 30 days: Monitor GIGABYTE security advisories for patch availability; develop a patch deployment plan; implement application whitelisting to restrict MacroHub's ability to launch external processes.

CVE-2026-0870

HIGH

Execution with Unnecessary Privileges (CWE-250)

2026-02-09 twcert@cert.org.tw

Privilege Escalation

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Feb 09, 2026 - 07:16 nvd

HIGH 7.8

DescriptionCVE.org

MacroHub developed by GIGABYTE has a Local Privilege Escalation vulnerability. Due to the MacroHub application launching external applications with improper privileges, allowing authenticated local attackers to execute arbitrary code with SYSTEM privileges.

AnalysisAI

GIGABYTE MacroHub improperly executes external applications with elevated privileges, enabling authenticated local users to achieve arbitrary code execution with SYSTEM-level access. This local privilege escalation affects MacroHub users on Windows systems and could allow attackers to fully compromise affected machines. No patch is currently available.

Technical ContextAI

Classified as CWE-250 (Execution with Unnecessary Privileges). MacroHub developed by GIGABYTE has a Local Privilege Escalation vulnerability. Due to the MacroHub application launching external applications with improper privileges, allowing authenticated local attackers to execute arbitrary code with SYSTEM privileges.