Back

MEDIUM

Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentication and using IOCTLs to read from and write to PCIe configuration space.Refer to the '

Published Sep 8, 2026

Description

Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentication and using IOCTLs to read from and write to PCIe configuration space.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner ASUS
Published Sep 8, 2026
Updated Sep 17, 2026
Reserved Aug 18, 2026
CISA Vulnrichment
Updated Sep 8, 2026
NVD
Status Deferred
Modified Sep 17, 2026
Red Hat
Severity n/a
Public date n/a
ENISA EUVD
Assigner ASUS
Published Sep 8, 2026
Updated Sep 17, 2026
Exploited since n/a
EUVD-2026-72619