PT-2026-44742 · Asus · Asus System Control Interface

CVE-2026-7480 · Published 2026-05-29 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v4.0

7.3

High

Base vector

AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions ASUS System Control Interface (affected versions not specified)

Description An incorrect permission assignment for critical resources in the ASUS System Control Interface allows a local user to elevate privileges to SYSTEM and execute arbitrary code. This is achieved through a crafted RPC (Remote Procedure Call) call that bypasses the validation mechanism.

Fix

LPE

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2026-7480

ZDI-26-328

Affected Products

Asus System Control Interface

References · 5

• https://asus.com/security-advisory · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-26-328 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-7480 · Security Note
• https://t.me/cveNotify/208710 · Telegram Post
• https://twitter.com/SystemTek_UK/status/2063181109404348900 · Twitter Post