What’s Vulnerable › Vulnerabilities

CVE-2026-15029

• Severity: high (CVSS 8.4 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-15 · updated 2026-09-17
• Weakness: CWE-822

Description

Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to perform arbitrary physical memory read and write operations via crafted IOCTL requests to the driver, bypassing OS-enforced memory protections. Refer to the '  Security Update for ASUS System Control Interface  ' section on the ASUS Security Advisory for more information.

Affected products

• ASUS Business Manager: through v3.0.38.0
• ASUS System Control Interface: before v1.1.40.0
• ASUS System Control Interface v3: before v3.1.65.0

References

• https://www.asus.com/security-advisory

Get alerted when CVE-2026-15029 or the next vulnerability affects your stack