EIP-2026-116820

This is a writeup describing an unquoted service path vulnerability in ASUS Control Center Express. The vulnerability allows privilege escalation to SYSTEM by placing a malicious executable in C:\Program.exe, which is executed by the service upon restart.