ASUS Business Manager vulnerabilities

2 CVEs affecting ASUS Business Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-8921, published 2026-07-03.

More from ASUS.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-8921, published 2026-07-03. High severity, CVSS 8.5. EPSS: 0.2% chance of exploitation in the next 30 days. External Control of File Name or Path vulnerability in ASUS Business Manager allows a local user to execute arbitrary code with SYSTEM privileges via a tampered IPC message. Refer to the ' Security…
• CVE-2025-13348, published 2026-02-02. High severity, CVSS 8.5. EPSS: 0.1% chance of exploitation in the next 30 days. An improper access control vulnerability exists in ASUS Secure Delete Driver of ASUS Business Manager. This vulnerability can be triggered by a local user sending a specially crafted request,…