Is CVE-2026-8921 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-8921

Description

External Control of File Name or Path vulnerability in ASUS Business Manager allows a local user to execute arbitrary code with SYSTEM privileges via a tampered IPC message. Refer to the ' Security Update for ASUS Business Manager ' section on the ASUS Security Advisory for more information.