Vulnerability in ASUS Business Manager
CVE-2026-8921
External Control of File Name or Path vulnerability in ASUS Business Manager allows a local user to execute arbitrary code with SYSTEM privileges via a tampered IPC message. Refer to the ' Security Update for ASUS Business Manager ' section on the ASUS Security Advisory for more information.
EPSS: 0.001 (2.5th percentile) — read the EPSS interpretation.
Affected products
- Asus Business Manager — versions 0