CVE-2026-19397: ASUS Control Center Express Agent

High severity, CVSS 7.7. EPSS: 0.2% chance of exploitation in the next 30 days.

Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active login session. Refer to the '  Security Update for ASUS Control Center Express Agent ' section on the ASUS Security Advisory for more information.

Affected products

• ASUS Control Center Express Agent: before v1.7.24 (fixed in v1.7.24)

Published 2026-09-08. Last modified 2026-09-28.