CVE-2026-8921CWE-73

CVE-2026-8921

published July 3, 2026

CVSS
8.5
EPSS
0%
Percentile
4.3
In the wild
Unconfirmed
What it is

External Control of File Name or Path vulnerability in ASUS Business Manager allows a local user to execute arbitrary code with SYSTEM privileges via a tampered IPC message.

Refer to the '

Security Update for ASUS Business Manager ' section on the ASUS Security Advisory for more information.

The record
Technical detail
CVSS
8.5 · NONE
CVSS v4.0
Not supplied
EPSS
0.00155 · 4.3th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2026-07-03T07:16Z
References (1)
https://www.asus.com/security-advisory · 54bf65a7-a193-42d2-b1ba-8e150d3c35e1
EPSS history
Timeline
  • 03 JUL 02:00Z
    External Control of File Name or Path vulnerability in ASUS Business Manager allows a local user to execute arbitrary code with SYSTEM privileges via a…
    cvelistv5