Asus Patches BIOS Flaw in Older Intel Motherboards

Asus has issued a security bulletin urging users to update the BIOS on a range of older motherboards after a local access vulnerability was identified. The flaw, tracked as CVE-2026-93495, carries a severity score of 7.0 and affects several ROG Strix and ROG Maximus models built for 8th and 9th Gen Intel CPUs.

According to the bulletin, the vulnerability allows a physically proximate user to read or write arbitrary memory by inserting a specially crafted device. That means an attacker would need physical access to the machine, but once in place, the crafted device could compromise memory contents.

Asus lists BIOS version 2203 as the fix for most affected models. The WS Z390 PRO is the exception, receiving its patch via BIOS version 1502. Affected boards include the ROG Maximus XI Hero, ROG Strix Z390-E Gaming, and PRIME Z390-A, among others.

The update follows an August disclosure of a separate high-severity vulnerability affecting Asus Armory Crate and similar software tools. That earlier issue involved software rather than firmware, but both cases highlight ongoing security maintenance for older hardware platforms.

Asus recommends that owners of the listed motherboards check their current BIOS version and apply the appropriate update. The company's security bulletin provides the full list of affected models and corresponding fixed versions.