Authentication Bypass in ASUS Control Center Express Agent

CVE-2026-19397

What is CVE-2026-19397?

A vulnerability exists in the ASUS Control Center Express Agent that allows unauthenticated users within proximity to gain control over the host system. This occurs when the host is maintaining an active session, enabling access to critical functions without proper authentication. This flaw poses a significant security risk as it can lead to unauthorized actions on the affected host. For further details, please consult the ASUS Security Advisory.

References