Skip to content
OpenAdvisories
High · 7.7 CVE-2026-19397 EUVD-2026-72612GHSA-x8xj-wv5r-w934

Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the ho…

Published Sep 8, 2026 · Updated Sep 17, 2026 · Assigned by ASUS

Description

Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active login session.
Refer to the ' 
Security Update for ASUS Control Center Express Agent ' section on the ASUS Security Advisory for more information.

Affected products

VendorProductAffectedFixed
ASUS Control Center Express Agent before v1.7.24 —

References