Privilege Escalation Vulnerability in ASUS DriverHub
CVE-2026-1880

5.4MEDIUM

Key Information:

Vendor

Asus
Status
Driverhub
Vendor
CVE Published:
16 April 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-1880?

An issue in the ASUS DriverHub update process stems from incorrect permission assignments, which can lead to privilege escalation. During the validation phase of the update process, inadequate protection of critical execution resources allows a local user to modify these resources without appropriate privileges. This malicious alteration can enable the tampered resource to bypass system checks and execute with escalated permissions through a user-initiated update, posing a significant security risk. For further guidance and updates, refer to the ASUS Security Advisory.

Affected Version(s)

DriverHub 0 < 1.0.6.12

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-1880
Created by seokjohn

References

https://www.asus.com/security-advisory

CVSS V4

Score:
5.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.