Is CVE-2026-8920 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-8920 being exploited in the wild.

How severe is CVE-2026-8920?

Informational severity, with a CVSS score of 8.5, published 15 July 2026.

Which products and versions are affected?

ASUS Aura Wallpaper Service v2.1.8.0 through v2.1.15.0.

Is there a fix for CVE-2026-8920?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-8920 attacked?

It is attacked with local access, in a network appliance.

Am I affected by CVE-2026-8920?

Check whether you run ASUS Aura Wallpaper Service at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-8920: ASUS Aura Wallpaper Service path traversal and communication bypass

CVE-2026-8920 · Severity: info · CVSS 8.5 · Published 2026-07-15

A vulnerability in the ASUS Aura Wallpaper Service, a software component used to manage desktop aesthetics on ASUS devices, could allow a local user to perform unauthorized file operations. By sending specially crafted commands, an attacker could bypass security restrictions to access or modify files they should not have permission to reach. In some cases, this can also cause specific software features to become unavailable, potentially disrupting system customization and stability.

Vendors: ASUS.

Quick answers

Is CVE-2026-8920 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-8920 being exploited in the wild.
How severe is CVE-2026-8920?: Informational severity, with a CVSS score of 8.5, published 15 July 2026.
Which products and versions are affected?: ASUS Aura Wallpaper Service v2.1.8.0 through v2.1.15.0.
Is there a fix for CVE-2026-8920?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-8920 attacked?: It is attacked with local access, in a network appliance.
Am I affected by CVE-2026-8920?: Check whether you run ASUS Aura Wallpaper Service at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability stems from a combination of improper restriction of communication channels (CWE-923) and external control of file names or paths (CWE-73) within the Aura Wallpaper Service. A local attacker with low privileges can send crafted commands containing arbitrary file paths to the service, effectively bypassing intended path restrictions. This allows the attacker to perform file operations outside of the designated directories. On specific hardware models, exploitation can lead to a denial-of-service condition for specific software features. The vulnerability affects versions v2.1.8.0 through v2.1.15.0.

Affected products

ASUS Aura Wallpaper Service v2.1.8.0 through v2.1.15.0

Timeline

2026-07-14: disclosed: Initial disclosure by ASUS via NVD and security advisory.
2026-07-15: advisory

References

https://www.asus.com/security-advisory/

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.