Výsledky hledání

ZDI-26-657: ASUS Control Center Express Agent Missing Authentication Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of ASUS Control Center Express Agent. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-19397.

EPSS 0.00 CVSS 9.8 CVE-2026-19397 ASUS US

tg: zranitelnost

10. 9. 07:00 · Zero Day Initiative · ZDI-26-657: ASUS Control Center Express Agent Missing Authentication Remote Code Execution Vulnerability

Risolte vulnerabilità in prodotti ASUS

Rilasciati aggiornamenti per risolvere una vulnerabilità di sicurezza, con gravità “critica”, che interessano il prodotto ASUS Control Center.

EPSS 0.00 CVE-2026-75754 ASUS IT

tg: zranitelnost

4. 9. 14:20 · CSIRT Itálie (ACN) · Risolte vulnerabilità in prodotti ASUS

ZDI-26-431: ASUS Business Manager Service Client-Side Authentication Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of ASUS Business Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-8921.

EPSS 0.00 CVSS 7.8 CVE-2026-8921 ASUS US

15. 7. 07:00 · Zero Day Initiative · ZDI-26-431: ASUS Business Manager Service Client-Side Authentication Local Privilege Escalation Vulnerability