CVE-2026-6737: CWE-782: Exposed IOCTL with Insufficient Access Control in ASUS AsusPTPFilter
CVE-2026-6737 is a low-severity vulnerability in the ASUS AsusPTPFilter driver involving an exposed IOCTL interface with insufficient access control. This flaw allows a local user to bypass driver security mechanisms and either access restricted touchpad information or disrupt touchpad functionality by sending crafted IOCTL requests. The vulnerability does not have an official patch or remediation guidance published at this time. There are no known exploits in the wild. The impact is limited due to the requirement for local access and high attack complexity. No geographic targeting is indicated.
AI Analysis
Technical Summary
This vulnerability (CVE-2026-6737) affects the AsusPTPFilter driver used by ASUS devices. It arises from an exposed IOCTL interface that lacks proper access control, enabling a local attacker with limited privileges to bypass security controls. Exploitation can lead to unauthorized access to restricted touchpad data or cause denial of service by rendering the touchpad unusable through crafted IOCTL requests. The CVSS 4.0 base score is 2.0, reflecting low severity due to local attack vector and high complexity. No official remediation or patch has been documented in the vendor advisory or related sources.
Potential Impact
The vulnerability allows a local user to bypass driver security mechanisms to access restricted touchpad information or disrupt touchpad operation. Since exploitation requires local access and crafted IOCTL requests, the overall impact is limited. There are no reports of active exploitation. The low CVSS score indicates minimal risk to confidentiality, integrity, and availability under typical conditions.
Mitigation Recommendations
Patch status is not yet confirmed — check the ASUS Security Advisory for current remediation guidance. Until an official fix is released, restrict local user access to trusted individuals only. Monitor ASUS advisories for updates regarding patches or workarounds. No vendor-provided mitigation or temporary fix is currently documented.
CVE-2026-6737: CWE-782: Exposed IOCTL with Insufficient Access Control in ASUS AsusPTPFilter
Description
CVE-2026-6737 is a low-severity vulnerability in the ASUS AsusPTPFilter driver involving an exposed IOCTL interface with insufficient access control. This flaw allows a local user to bypass driver security mechanisms and either access restricted touchpad information or disrupt touchpad functionality by sending crafted IOCTL requests. The vulnerability does not have an official patch or remediation guidance published at this time. There are no known exploits in the wild. The impact is limited due to the requirement for local access and high attack complexity. No geographic targeting is indicated.
CVSS v4.0
Score 2.0low
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2026-6737) affects the AsusPTPFilter driver used by ASUS devices. It arises from an exposed IOCTL interface that lacks proper access control, enabling a local attacker with limited privileges to bypass security controls. Exploitation can lead to unauthorized access to restricted touchpad data or cause denial of service by rendering the touchpad unusable through crafted IOCTL requests. The CVSS 4.0 base score is 2.0, reflecting low severity due to local attack vector and high complexity. No official remediation or patch has been documented in the vendor advisory or related sources.
Potential Impact
The vulnerability allows a local user to bypass driver security mechanisms to access restricted touchpad information or disrupt touchpad operation. Since exploitation requires local access and crafted IOCTL requests, the overall impact is limited. There are no reports of active exploitation. The low CVSS score indicates minimal risk to confidentiality, integrity, and availability under typical conditions.
Mitigation Recommendations
Patch status is not yet confirmed — check the ASUS Security Advisory for current remediation guidance. Until an official fix is released, restrict local user access to trusted individuals only. Monitor ASUS advisories for updates regarding patches or workarounds. No vendor-provided mitigation or temporary fix is currently documented.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- ASUS
- Date Reserved
- 2026-04-21T06:25:50.061Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 69fd4c27cbff5d86107b37fe
Added to database: 05/08/2026, 02:36:23 UTC
Last enriched: 05/15/2026, 11:01:31 UTC
Last updated: 07/31/2026, 19:23:00 UTC
Views: 135
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.