CVE-2023-26911

7.8 highEPSS 0.2%

High (7.8) in asus. EPSS 0.2% chance of exploitation in the next 30 days.

ASUS SetupAsusServices v1.0.5.1 in Asus Armoury Crate v5.3.4.0 contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 9% of CVEs (scores of 2026-10-31)
CWE: CWE-428
Published: 2023-07-26
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

asus:armoury_crate
asus:setupasusservices

References

https://irradiate.com.au/blog/CVE-2023-26911
https://irradiate.com.au/blog/CVE-2023-26911

Check your stack JSON