ZDI-26-328: ASUS MyASUS Origin Validation Error Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of ASUS MyASUS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-7480.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-26-328?
The severity of ZDI-26-328 is rated with a CVSS score of 7.8, indicating a high risk level.
How do I fix ZDI-26-328?
To fix ZDI-26-328, update your ASUS MyASUS software to the latest version provided by ASUS.
Who is affected by ZDI-26-328?
ZDI-26-328 affects users of the ASUS MyASUS software who have low-privileged code execution capabilities.
What type of vulnerability is ZDI-26-328?
ZDI-26-328 is a local privilege escalation vulnerability that allows attackers to gain higher privileges on the affected system.
Can ZDI-26-328 be exploited remotely?
No, ZDI-26-328 requires an attacker to have local access to the system to exploit the vulnerability.