ASUS Control Center Flaw Allows Attackers to Gain Full Admin Control of the System

Cybersecuritynews •Guru Baran • September 6, 2026

ASUS has issued an urgent security update for ASUS Control Center Enterprise (ACC) after researchers uncovered a maximum-severity vulnerability that lets remote attackers seize complete administrative control over the platform and every device it manages, without needing a password or any user interaction. Tracked as CVE-2026-75754, the flaw carries a CVSS 4.0 score of 10.0, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in ASUS Control Center Exposes Systems to Remote Attacks ASUS has released an urgent security update for ASUS Control Center Enterprise (ACC) due to a critical vulnerability, tracked as CVE-2026-75754, that allows remote attackers to gain full administrative control without authentication. The flaw affects ACC version 4.0.0.2 and earlier, enabling unauthenticated root access. The vulnerability was first published on September 4, 2026, and has a CVSS score of 10.0, indicating maximum severity. Researchers have confirmed that the flaw allows attackers to control all devices managed by the ACC platform. Users are strongly advised to update to the latest version to mitigate the risk. The advisory emphasizes the urgent need for immediate action to protect affected systems. 3 sources 72

Extracted Entities

Companies (1)

Asus

CVEs (1)

CVE-2026-75754