Asus Control Center Enterprise vulnerabilities

CVE-2026-75754 [CRITICAL] CWE-306 CVE-2026-75754: Missing Authentication for Critical Function, Server-Side Request Forgery (SSRF), and Use of Hard-co Missing Authentication for Critical Function, Server-Side Request Forgery (SSRF), and Use of Hard-coded Credentials in ASUS Control Center allow an unauthorized user to obtain the encryption key via an HTTP request, causing a local service to enable SSH on port 2222. The attacker can then log in with the hardcode credentials to obtain a root shell