CVE Feed

    Dashboard / CVE / CVE-2026-1880

    CVE-2026-1880

    An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of required execution resources during the validation phase, permitting a local user to make unprivileged modifications. This allows the altered resource to pass system checks and be executed with elevated privileges upon a user-initiated update. Refer to the 'Security Update for ASUS DriverHub' section on the ASUS Security Advisory for more information.

    Published:Apr 16, 2026
    Last Modified:Apr 17, 2026
    EPS:Apr 16, 2026
    EPSS Score:0.00005
    CVSS Score:5.4

    Affected Products

    Vendor
    Asus
    Product
    Driverhub

    Exploits

    https://github.com/seokjohn/CVE-2026-1880

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High