CVE-2026-93495Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device.
Updated under an hour ago ()
Does this affect you?
It affects ASUS Motherboard(PRIME Z390-A ) and 12 other products. Add what you run to find out whether that includes you.
EPSS puts the chance of exploitation in the next 30 days at 0.16%, higher than 5% of scored CVEs.
Do this next
Free account, 1 product
Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device. Refer to the ' Security Update for Multiple ASUS Motherboards ' section on the ASUS Security Advisory for more information.
- CVSS
- 7.0 HIGH (v4.0, CNA)CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- Weakness (CWE)
- CWE-665
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- 0.16% (percentile 5)
- Assigned by
- ASUS
- NVD analysis
- Awaiting Analysis
- Record last updated
- Oct 5, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
ASUS Motherboard(PRIME Z390-A ) asus:motherboard_prime_z390_a (from the name) | through 2101 | CNA record |
ASUS Motherboard(PRIME Z390-A/H10 ) asus:motherboard_prime_z390_a_h10 (from the name) | through 2101 | CNA record |
ASUS Motherboard(ROG MAXIMUS XI HERO ) asus:motherboard_rog_maximus_xi_hero (from the name) | through 2101 | CNA record |
ASUS Motherboard(ROG MAXIMUS XI HERO (WI-FI) ) asus:motherboard_rog_maximus_xi_hero_wi_fi (from the name) | through 2101 | CNA record |
ASUS Motherboard(ROG MAXIMUS XI FORMULA ) asus:motherboard_rog_maximus_xi_formula (from the name) | through 2101 | CNA record |
ASUS Motherboard(ROG MAXIMUS XI CODE ) asus:motherboard_rog_maximus_xi_code (from the name) | through 2101 | CNA record |
ASUS Motherboard(ROG MAXIMUS XI EXTREME ) asus:motherboard_rog_maximus_xi_extreme (from the name) | through 2101 | CNA record |
ASUS Motherboard(ROG MAXIMUS XI APEX ) asus:motherboard_rog_maximus_xi_apex (from the name) | through 2101 | CNA record |
ASUS Motherboard(ROG MAXIMUS XI GENE ) asus:motherboard_rog_maximus_xi_gene (from the name) | through 2101 | CNA record |
ASUS Motherboard(ROG STRIX Z390-E GAMING ) asus:motherboard_rog_strix_z390_e_gaming (from the name) | through 2101 | CNA record |
ASUS Motherboard(ROG STRIX Z390-F GAMING ) asus:motherboard_rog_strix_z390_f_gaming (from the name) | through 2101 | CNA record |
ASUS Motherboard(Pro WS C246-ACE ) asus:motherboard_pro_ws_c246_ace (from the name) | through 2101 | CNA record |
ASUS Motherboard(WS Z390 PRO ) asus:motherboard_ws_z390_pro (from the name) | through 1401 | CNA record |
References
- https://www.asus.com/security-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.