--- url: "https://www.xcademia.com/news/asus-issues-security-update-for-control-center-enterprise-cve-2026-75754-listed" title: "ASUS Issues Security Update for Control Center Enterprise, CVE-2026-75754 Listed" description: "ASUS has issued a security update for Control Center Enterprise 4.0.0.2 and earlier, listed as CVE-2026-75754." publishedAt: "2026-09-07T08:42:37.667+00:00" updatedAt: "2026-09-07T11:23:12.054946+00:00" type: news category: cybersecurity source_name: ASUS Product Security Advisory source_url: "https://www.asus.com/security-advisory/" tags: - "#ASUS" - "#Cybersecurity" - "#SecurityAdvisory" - "#CVE" - "#Vulnerability" - "#ASUSControlCenter" - "#ProductSecurity" - "#VulnerabilityManagement" --- # ASUS Issues Security Update for Control Center Enterprise, CVE-2026-75754 Listed > ASUS has published a security update for ASUS Control Center Enterprise 4.0.0.2 and earlier, identified as CVE-2026-75754, as part of its latest product security advisories. Source: **ASUS Product Security Advisory** · 7 September 2026 ASUS has published a new security bulletin for **ASUS Control Center Enterprise (ACC)** as part of its ongoing product security advisory program. The latest bulletin, published and updated on **September 4, 2026**, affects **ASUS Control Center Enterprise version 4.0.0.2 and earlier** and is associated with **CVE-2026-75754**. ASUS lists the entry as a Security Bulletin on its Product Security Advisory page. The main advisory listing does not provide additional technical information about CVE-2026-75754, including its severity, exploitation status, attack requirements, or specific security impact. **Additional details were not disclosed in the announcement.** ## ASUS Control Center Security Update at a Glance Item Details Product ASUS Control Center Enterprise Affected versions 4.0.0.2 and earlier CVE CVE-2026-75754 Bulletin type Security Bulletin Published September 4, 2026 Last updated September 4, 2026 ### ![info-1](https://0a515t3ure77wbvx.public.blob.vercel-storage.com/articles/1788766209456-info-1--130-.webp) ## ASUS Security Updates Cover Multiple Product Categories The Control Center Enterprise bulletin is the newest entry displayed in ASUS's latest security update list. The ASUS security advisory page currently displays **112 entries** in its security update list, with 10 entries shown per page. Recent entries cover a range of ASUS software, firmware, BIOS, utilities and networking products. These include: - **ASUS FA507NV / FA507NU BIOS**, with affected versions identified as FA507NV 318 and FA507NU 318 and associated with CVE-2026-19398. - **GPU Tweak III, GPU Tweak II, AI Suite 3 and an Armoury Crate component**, associated with CVE-2026-8917. - **Armoury Crate App**, affecting versions prior to V6.5.7.0 and associated with CVE-2026-16727. - **Legacy ASUS Drivers**, involving GLCKIO2.sys, ASIO.sys and ASIO2.sys and associated with CVE-2019-25764, CVE-2022-4989 and CVE-2022-4990. - **ASUS GameSDK**, version 1.0.5 and earlier, associated with CVE-2026-8919. - **Aura Wallpaper Service**, version 2.1.15.0 and earlier, associated with CVE-2026-8920. - **ASUS System Control Interface and ASUS Business Manager**, with three CVEs listed. - **ASUS Router Firmware**, covering multiple 3.0.0.x firmware series and associated with CVE-2026-13385 and CVE-2026-11851. The advisory list shows that ASUS's security update program covers multiple areas of its product ecosystem rather than a single product category. ### ![info-2](https://0a515t3ure77wbvx.public.blob.vercel-storage.com/articles/1788766182674-info-2--111-.webp) ## ASUS Encourages Customers to Keep Products Updated ASUS says product security is a continuous commitment and encourages customers to follow security best practices, keep products updated and apply the latest firmware and software patches. The company also recommends that customers regularly visit its Product Security Advisory page to stay informed about newly published security updates. ASUS says it will maintain a list of the latest software updates along with descriptions of the issues that have been fixed. For customers using ASUS products covered by the advisories, the appropriate step is to check the relevant bulletin and determine whether their installed product or software version falls within the affected range. The main ASUS listing does not provide additional remediation details for CVE-2026-75754. **The company did not provide specific information about this area.** ## ASUS Uses Coordinated Vulnerability Disclosure The latest security bulletin is part of a broader vulnerability management process outlined by ASUS. The company says it follows the principles of **Coordinated Vulnerability Disclosure (CVD)** and works with industry partners, academic researchers and cybersecurity experts to address potential vulnerabilities. ASUS also states that it follows practices outlined in **ISO 29147:2018** and **ISO 30111:2019** for vulnerability management and handling. The company identifies itself as a **CVE Numbering Authority (CNA)** participant and a member of the **Forum of Incident Response and Security Teams (FIRST)**. ASUS says that information supplied through its vulnerability reporting process is used to help resolve reported security or privacy issues. The company may contact the submitter when additional information is required. Once a vulnerability report has been confirmed, ASUS says it will notify the submitter and provide updates on the handling status. ## What ASUS Requests From Security Researchers ASUS welcomes reports concerning security issues affecting its products and services. The company asks researchers to provide detailed information that can help its security team reproduce and resolve reported vulnerabilities. Information requested can include: - The affected ASUS service, system or product - The affected software name and version - A detailed description of the issue - Background information relevant to the issue - Methods used to discover the vulnerability - Detailed reproduction steps - Technical description of the vulnerability - Proof of concept, if possible - Potential impact - Additional information that could help ASUS reproduce and resolve the issue ASUS says it strives to provide an initial acknowledgement within **three business days** after receiving a product security report. The company also says it provides status updates at significant milestones throughout the vulnerability management process, including validation, remediation planning and resolution. If ASUS requests additional information and the reporter remains unresponsive for **30 consecutive days**, the case may be automatically closed. ASUS adds that it may continue investigating a closed case internally if sufficient information has already been provided. ### ![info-3](https://0a515t3ure77wbvx.public.blob.vercel-storage.com/articles/1788766161770-info-3--104-.webp) ## ASUS Sets Boundaries for Vulnerability Testing ASUS also provides guidelines for responsible security research. Researchers are asked not to access or modify ASUS services, systems, products or software without authorization. The company asks researchers not to disclose, modify, destroy or misuse data discovered during security testing. ASUS also requests that researchers avoid denial-of-service attacks and other destructive testing that could affect the confidentiality, integrity or availability of information and systems. The guidelines also prohibit social engineering and phishing activities targeting ASUS customers or employees. ASUS asks that information exchanged during the vulnerability reporting process remain confidential. The company also states that compensation requests for time and resources spent verifying or discovering vulnerabilities will not be considered. ## Vulnerability Categories ASUS May Handle at Its Discretion ASUS says it prioritizes security but identifies several vulnerability categories that have very low impact on system or user security and may be handled at its discretion. Examples listed by ASUS include: - Outdated third-party libraries with known vulnerabilities that create low-impact security risks - Inadequate rate limiting or missing CAPTCHA mechanisms - Missing or incomplete SPF, DMARC or DKIM records - Cookies that are not properly configured with HTTPOnly or Secure flags - Vulnerabilities affecting outdated or unpatched non-ASUS browsers, extensions or other software - Automated tool reports based solely on tool-generated findings without further analysis - Publicly accessible files or directories such as robots.txt - Low-risk clickjacking or UI issues - Stack traces displayed on error pages - Disclosure of technology or component information - Account or email enumeration without significant security impact - Missing non-mandatory security headers where there is no demonstrated exploit - Low-risk CSRF issues such as login or logout scenarios ASUS says reports in these categories may be handled according to the circumstances of each case. ## ASUS Recommends Encrypted Communication ASUS encourages researchers to use encrypted communication when submitting vulnerability information. The company provides a **PGP public key** for researchers who want to encrypt their reports. Once reported issues have been resolved, ASUS says it will provide a suitable solution to affected customers. The company also says it will maintain its list of security updates and descriptions of issues that have been fixed. Although ASUS says it will notify customers wherever possible, it recommends that customers regularly visit its Product Security Advisory page to remain aware of the latest updates. ## ASUS Recognizes Security Researchers The ASUS Product Security Advisory page also includes a **Hall of Fame** recognizing researchers who have contributed to the company's security program. The 2026 list includes researchers credited during multiple months, including January through August. Some entries identify researchers working with organizations including **Trend Micro Zero Day Initiative, Zhongguancun Laboratory and SentinelOne**, while other entries identify individual researchers. The Hall of Fame reflects ASUS's engagement with the wider security research community. ## What ASUS Customers Should Do The latest advisory does not provide enough information to determine the severity or exploitation conditions associated with **CVE-2026-75754**. Customers using **ASUS Control Center Enterprise** should therefore check whether their deployment uses **version 4.0.0.2 or earlier** and review ASUS's relevant security bulletin for available remediation information. Customers using other ASUS products should similarly compare their installed versions against the affected versions listed in the corresponding security advisories. ASUS's broader guidance is to keep products updated, apply available firmware and software patches, and regularly review the company's security advisory page. For organizations managing multiple ASUS devices, maintaining an inventory of installed software, firmware and product versions can help identify which security advisories are relevant. This is general security practice and is not a specific ASUS requirement. ## The Broader Security Picture The September 4 advisory demonstrates the breadth of security maintenance across modern hardware and software ecosystems. ASUS's recent security updates span enterprise management software, laptop BIOS, gaming utilities, system software, drivers and router firmware. **The announcement highlights a broader industry shift toward continuous vulnerability management across connected hardware and software ecosystems.** For enterprises, this could mean that security teams need visibility across multiple components of their technology environment, including firmware, drivers, utilities and management software. However, the available ASUS advisory information does not establish that CVE-2026-75754 is being actively exploited or provide a specific severity classification. **Additional details were not disclosed in the announcement.** ## ASUS Continues Its Product Security Program The latest Control Center Enterprise bulletin forms part of ASUS's broader product security advisory program. The company maintains a public list of security updates and encourages customers to regularly check for newly published information. The September 4 update specifically concerns **ASUS Control Center Enterprise 4.0.0.2 and earlier** and references **CVE-2026-75754**. Other recent ASUS advisories cover BIOS, gaming utilities, system software, drivers and router firmware, demonstrating the range of products included in the company's security maintenance process. For affected customers, the key step is to identify the ASUS products and versions in use and consult the applicable security bulletin for the latest update information. ## Original source https://www.asus.com/security-advisory/ ## Tags `#ASUS` · `#Cybersecurity` · `#SecurityAdvisory` · `#CVE` · `#Vulnerability` · `#ASUSControlCenter` · `#ProductSecurity` · `#VulnerabilityManagement` --- ## About this content This Markdown news article is the citation-grade twin of [ASUS Issues Security Update for Control Center Enterprise, CVE-2026-75754 Listed](https://www.xcademia.com/news/asus-issues-security-update-for-control-center-enterprise-cve-2026-75754-listed). It is published by **Xcademia** (UK Companies House 12322710) and is available for AI search engines and large language models to index, summarise, and cite. When citing or quoting, please attribute *Xcademia* and link back to the source URL above. - Source: https://www.xcademia.com/news/asus-issues-security-update-for-control-center-enterprise-cve-2026-75754-listed - Publisher: Xcademia — https://www.xcademia.com - Catalogue index: https://www.xcademia.com/llms-full.txt