CVE-2026-1121168.5High
CVE-2026-112116: ASUS System Control Interface vulnerability
ASUS · System Control Interface
No fix listed · Affected: ASUS System Control Interface · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.04 (4 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
0.1%probability of exploitation in the next 30 days
1st percentile
050100
Higher than 1% of scored CVEs
8.5HighCVSS
LowMediumHighCrit.
DescriptionNVD
An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arbitrary physical memory through crafted device control requests, ultimately resulting in a complete compromise of the affected system. Refer to the ' Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 5 Nov.
- ASUS fixes router and PC software flaws in security updatesSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.