VulnSocial

CVE-2026-18023Patch

LOWCVSS 5.7 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose sensitive information from uninitialized memory via a crafted IOCTL request that bypasses the driver's security verification mechanism. Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-226

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-16: 1Patch / Workaround · 2026-09-16: 1Technical Details · 2026-09-16: 109-16
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
Full discourse1 post
  • iototsecnews@iototsecnews
    Patch

    ASUS Control Center Critical の脆弱性 CVE-2026-19397：認証の欠如と root アクセス https://iototsecnews.jp/2026/09/08/asus-control-center-critical-flaw-allows-unauthenticated-attackers-to-gain-root-access/ ASUS Control Center Express Agent において認証処理の欠如が存在します。近隣のネットワークから未認証のまま接続されることで root 権限によるコード実行を許し、ホスト全体が制御される恐れがあります。 CVE-2026-19397 が割り当てられたこの問題への対処として、バージョン 1.7.24 以降への更新 ／アクセス可能なインターフェイスの確認／ネットワーク分離や壁による制限／不審な接続やプロセスの監視が求められます。また Armory Crate App にも CVE-2026-12962／CVE-2026-18023／CVE-2026-16003～CVE-2026-16006／CVE-2026-75808～CVE-2026-75811 が影響するため、併せて確認が必要です。 #Asus #ControlCenterExpressAgent #CVE202619397 #Vulnerability

    Post summary

    The article reports an authentication bypass (CVE‑2026‑19397) in ASUS Control Center Express Agent that allows unauthenticated root code execution, and advises updating to version 1.7.24 or later plus network security mitigations.

    00000104
    513 followersView on X

Explore more

Back to dashboard