CVE-2026-7480

7.3 highEPSS 0.1%

High (7.3). EPSS 0.1% chance of exploitation in the next 30 days.

An Incorrect Permission Assignment for Critical Resource vulnerability in ASUS System Control Interface allows a local user to elevate privileges to SYSTEM and execute arbitrary code via a crafted RPC call that bypass the validation mechanism. Refer to the 'Security Update for ASUS System Control Interface' section on the ASUS Security Advisory for more information.

Severity

CVSS 4.0

7.3 high

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2026-05-29
Modified: 2026-07-21
Record from: the NVD, synced 2026-10-19

References

https://www.asus.com/security-advisory/

Check your stack JSON