EIP-2026-117322

The exploit describes an unquoted service path vulnerability in ASUS InstantOn (InsOnSrv.exe) version 2.3.1.1, allowing local privilege escalation. The service path lacks quotes, enabling an attacker to place a malicious executable in a higher-priority directory to achieve SYSTEM privileges.