VULNERABILITY INTELLIGENCE

CVE-2026-89216

CVSS score8.6 HIGH

EPSS probability0.15%

CISA KEVNot currently listed

Published2026-10-29

Last modified2026-10-29

Description

External Control of File Name or Path vulnerability in ASUS Business Manager allows a local user to execute arbitrary code with SYSTEM privileges via a tampered IPC message. Refer to the ' Security Update for ASUS Business Manager ' section on the ASUS Security Advisory for more information.