CVE-2023-26911

HIGH 7.8CVE-2023-26911 · Published 26/07/2023 · updated 09/07/2026

In short

CVE-2023-26911 is a HIGH (CVSS 7.8) vulnerability affecting armoury crate (asus), setupasusservices (asus).
Chance of exploitation in the next 30 days (EPSS): 0.20%, higher than 9.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
armoury crate asus	`≤ 5.3.4.0`	No fix yet
setupasusservices asus	`≤ 1.0.5.1`	No fix yet

Description

ASUS SetupAsusServices v1.0.5.1 in Asus Armoury Crate v5.3.4.0 contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges.

References

irradiate.com.au/blog/CVE-2023-26911 · Third Party Advisory

More vulnerabilities in armoury crate

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free