CVE-2026-8921 — ASUS / ASUS Business Manager

CVE-2026-8921

ASUS / ASUS Business Manager PUBLISHED

Description (CNA)

External Control of File Name or Path vulnerability in ASUS Business Manager allows a local user to execute arbitrary code with SYSTEM privileges via a tampered IPC message. Refer to the ' Security Update for ASUS Business Manager ' section on the ASUS Security Advisory for more information.

Affected (CNA)

Vendor / product	Versions
ASUS / ASUS Business Manager	affected through v3.0.38.0

CWE

CWE-73

References

https://www.asus.com/security-advisory

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.