CVE-2026-19397: High severity ASUS ASUS Control Center Express Agent vulnerability
Published Sep 8, 2026
·Updated
Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active login session. Refer to the ' Security Update for ASUS Control Center Express Agent ' section on the ASUS Security Advisory for more information.
Affected Software
1 affected component
ASUS ASUS Control Center Express Agent
Event History
Sep 8, 2026
CVE Published
via MITRE·02:04 AM
Data Sourced
via MITRE·02:04 AM
DescriptionWeakness
Data Sourced
via NVD·03:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who is exposed to this issue?
Hosts running ASUS Control Center Express Agent are exposed when they have an active login session and an attacker is nearby enough to make a direct connection to the agent.
2
Does an attacker need credentials to exploit it?
No. The issue is described as missing authentication for a critical function, so an unauthenticated nearby user can control the host through a direct connection to the agent.