Critical Vulnerability in ASUS Control Center Exposes Systems to Remote Attacks
Article Content
- •CVE-2026-75754 allows unauthenticated root access to ACC systems.
- •ASUS Control Center versions 4.0.0.2 and earlier are affected.
- •Immediate patching is required due to the critical nature of this vulnerability.
ASUS has released an urgent security update for ASUS Control Center Enterprise (ACC) due to a critical vulnerability, tracked as CVE-2026-75754, that allows remote attackers to gain full administrative control without authentication. The flaw affects ACC version 4.0.0.2 and earlier, enabling unauthenticated root access. The vulnerability was first published on September 4, 2026, and has a CVSS score of 10.0, indicating maximum severity. Researchers have confirmed that the flaw allows attackers to control all devices managed by the ACC platform. Users are strongly advised to update to the latest version to mitigate the risk. The advisory emphasizes the urgent need for immediate action to protect affected systems.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Asus and CVE-2026-75754 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…