Critical ASUS Control Center CVE-2026-75754 Flaw Allows Unauthenticated Root Access

ASUS has issued a security bulletin regarding a critical vulnerability in ASUS Control Center Enterprise (ACC), identified as CVE-2026-75754. This flaw affects ACC version 4.0.0.2 and earlier, allowing for unauthenticated root access.

Critical ASUS Control Center Flaw

The advisory was published on September 4, 2026, and was last updated on the same day. While the vendor has identified the affected product and version range, it has not disclosed specific details about the vulnerable component, the attack vector, prerequisites for exploitation, whether exploitation requires network exposure, or any proof-of-concept information. Further technical details may be released by ASUS in the future.

ASUS Control Center Enterprise is designed for centralized management and monitoring. A vulnerability that grants root-level access without authentication could allow an attacker to gain full control of a targeted host or appliance.

This may involve altering configurations, accessing sensitive operational data, installing persistent mechanisms, or using the compromised environment as a pivot point to infiltrate adjacent infrastructure.

The practical impact of this vulnerability will depend on the deployment, connectivity, account segregation, and privileges of the service components associated with ACC.

Administrators should promptly identify all ACC deployments to determine if they are running version 4.0.0.2 or an earlier release. They should obtain and apply the vendor’s security update as soon as it becomes available through approved channels.

Until patching is complete, security teams should restrict management interface access to authorized administrators only, limit exposure from untrusted networks, and review firewall rules, remote-access pathways, and administrative account controls.

Security professionals should also analyze authentication, process, and network logs for unusual administrative activities involving ACC servers or managed endpoints.

Special attention should be given to unexpected root-level sessions, newly created privileged accounts, changes to service configurations, suspicious scheduled tasks, and lateral connections originating from management infrastructure. Since the published bulletin does not provide indicators of compromise, it is essential to employ anomaly detection and baseline comparisons.

This advisory highlights the security importance of enterprise management software. These platforms often have extensive visibility and control over numerous devices, so a compromise can lead to consequences beyond a single server.

ASUS states that it follows coordinated vulnerability disclosure practices and is involved in the CVE Numbering Authority program while encouraging customers to keep products up to date and apply current patches.

Organizations should monitor the ASUS Product Security Advisory page for updated remediation guidance, information on fixed versions, and additional technical details. Security teams should document affected assets, validate the applied updates after maintenance, and preserve relevant logs in case future reports identify exploitation activity.

Keep your SOC up to date on active malware & phishing within 24h of their emergence. Try ANYRUN to prevent incidents with early detection.