Skip to content
OpenAdvisories
Medium · 5.9 CVE-2026-75809 EUVD-2026-72619GHSA-vgfg-vxw7-9mc6

Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device fun…

Published Sep 8, 2026 · Updated Sep 17, 2026 · Assigned by ASUS

Description

Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentication and using IOCTLs to read from and write to PCIe configuration space.Refer to the '
Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.

Affected products

VendorProductAffectedFixed
ASUS Armoury Crate through 6.5.7 —

References