ASUS Business Manager vulnerabilities

3 CVEs affecting ASUS Business Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-15030, published 2026-07-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-15029, published 2026-07-15. High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days. Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to perform arbitrary physical memory read and…
CVE-2026-13585, published 2026-07-15. High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days. Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in the ASUS System Control Interface driver and ASUS Business Manager allow a…
CVE-2026-15030, published 2026-07-15. Medium severity, CVSS 5.6. EPSS: 0.1% chance of exploitation in the next 30 days. Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the intended firmware…