PT-2026-24911 · Asus · Rog Peripheral Driver

Published 2026-03-11 · Updated 2026-03-12 · CVE-2026-1878

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ASUS ROG peripheral driver (affected versions not specified)

Description An Insufficient Integrity Verification issue in the ASUS ROG peripheral driver installation process can lead to privilege escalation to SYSTEM. This is caused by inadequate access control on the installation directory, allowing a race condition where a legitimate installer can be replaced with an unexpected payload immediately after download, resulting in arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Weakness Enumeration

CWE-494

Related Identifiers

BDU:2026-05198

CVE-2026-1878

Affected Products

Rog Peripheral Driver

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-1878 · Security Note
• https://bdu.fstec.ru/vul/2026-05198 · Security Note
• https://t.me/CVEtracker/47217 · Telegram Post
• https://asus.com/security-advisory · Note
• https://t.me/cveNotify/155218 · Telegram Post
• https://twitter.com/CVEarity/status/2032075763323932940 · Twitter Post
• https://twitter.com/CVEnew/status/2031992344594309442 · Twitter Post