ZDI-CAN-28776: ZDI-26-328: ASUS MyASUS Origin Validation Error Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of ASUS Business Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-8921.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of ASUS MyASUS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-7480.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-28776?
ZDI-CAN-28776 has a CVSS rating of 7.8, indicating it is a high-severity vulnerability.
How do I fix ZDI-CAN-28776?
To mitigate ZDI-CAN-28776, update your ASUS MyASUS software to the latest version provided by ASUS.
Who is affected by ZDI-CAN-28776?
ZDI-CAN-28776 affects installations of ASUS MyASUS that allow local privilege escalation.
What type of vulnerability is ZDI-CAN-28776?
ZDI-CAN-28776 is classified as a local privilege escalation vulnerability.
What must an attacker do to exploit ZDI-CAN-28776?
An attacker must first obtain the ability to execute low-privileged code on the target system to exploit ZDI-CAN-28776.