CVE-2026-112116
Quick assessment
Affected
ASUS System Control Interface
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
华硕系统控制接口（ASUS System Control Interface）中存在一个访问控制不足的暴露 IOCTL（输入/输出控制）漏洞。该漏洞允许本地低权限用户通过精心构造的设备控制请求，读取和写入任意物理内存，最终导致受影响系统被完全攻破。 更多信息请参阅华硕安全公告中的“华硕系统控制接口安全更新”部分。
Possible ATT&CK Techniques 1 AI
T1068 · Exploitation for Privilege Escalation
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-112116
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arbitrary physical memory through crafted device control requests, ultimately resulting in a complete compromise of the affected system.
Refer to the ' Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
无充分访问控制条件下暴露IOCTL
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| ASUS | System Control Interface | 3.1.66.0 ~ 3.1.69.0 | - |
|
II. Public POCs for CVE-2026-112116
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-112116
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-112116 (1)
Same Patch Batch · ASUS · 2026-11-04 · 4 CVEs total
| CVE-2026-84730 | 8.7 HIGH | ASUS 路由器固件堆栈缓冲区溢出漏洞 |
| CVE-2026-84729 | 7.2 HIGH | 华硕路由器固件越界写漏洞 |
| CVE-2026-110464 | 6.9 MEDIUM | ASUS Armoury Crate 任意版本本地提权与拒绝服务漏洞 |