CVE-2026-12962Patch

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local user's NTLM hash by convincing the user to visit a crafted web page that sends a request containing a UNC path to the application's local service endpoint.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://www.asus.com/security-advisory

Weakness type (CWE)

CWE-942

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Referenced assets1 URL

By indicator

https://iototsecnews.jp/2026/09/08/asus-control-center-critical-flaw-allows-unauthenticated-attackers-to-gain-root-access/

Full discourse1 post

iototsecnews@iototsecnews46d
Patch
ASUS Control Center Critical の脆弱性 CVE-2026-19397：認証の欠如と root アクセス https://iototsecnews.jp/2026/09/08/asus-control-center-critical-flaw-allows-unauthenticated-attackers-to-gain-root-access/ ASUS Control Center Express Agent において認証処理の欠如が存在します。近隣のネットワークから未認証のまま接続されることで root 権限によるコード実行を許し、ホスト全体が制御される恐れがあります。 CVE-2026-19397 が割り当てられたこの問題への対処として、バージョン 1.7.24 以降への更新／アクセス可能なインターフェイスの確認／ネットワーク分離や壁による制限／不審な接続やプロセスの監視が求められます。また Armory Crate App にも CVE-2026-12962／CVE-2026-18023／CVE-2026-16003～CVE-2026-16006／CVE-2026-75808～CVE-2026-75811 が影響するため、併せて確認が必要です。 #Asus #ControlCenterExpressAgent #CVE202619397 #Vulnerability
Post summary
The post discloses CVE-2026-19397 in ASUS Control Center Express Agent and emphasizes remediation by upgrading to version 1.7.24 or later plus network-related mitigations.
00000104
513 followersView on X

Explore more

Back to dashboard