CVE-2026-12962 | BDVDB-2026-368964 Detail

Description#

A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local user's NTLM hash by convincing the user to visit a crafted web page that sends a request containing a UNC path to the application's local service endpoint.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-09-08Record published in the CVE List.
2. Version 22026-09-17Most recent update recorded in the CVE List.