CVE-2026-112116 — Vulnerability intelligence
—
Published:
- CVSS
- 8.5
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arbitrary physical memory through crafted device control requests, ultimately resulting in a complete compromise of the affected system.
Refer to the ' Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.