ASUS vulnerabilities

CVEs per yearBy the year they were published

1. 20182
2. 202222
3. 202238
4. 202323
5. 202532
6. 202515
7. 202650
8. 20264

Known exploitedNewest addition to KEV first

• CVE-2025-59374

  "UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were distributed with unauthorized modifications introduced through a supply chain…

  ASUS · live update

  ExploitedCritical9.3
• CVE-2023-39780

  On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist parameter. NOTE:…

  ASUS · RT-AX55

  ExploitedHigh8.8

Newest CVEs

• CVE-2026-84729

  Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attacker to write data beyond the intended buffer or potentially cause a…

  ASUS · Router firmware

  High7.2
• CVE-2026-84730

  Stack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated nearby attacker to execute arbitrary commands with root privileges via a…

  ASUS · Router firmware

  High8.7
• CVE-2026-112116

  An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arbitrary physical…

  ASUS · System Control Interface

  High8.5
• CVE-2026-110464

  Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry location with Local System privileges, or…

  ASUS · Armoury Crate

  Medium6.9
• CVE-2026-88781

  Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O…

  ASUS · motherboards firmware

  Medium6.8
• CVE-2026-75775

  Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges…

  ASUS · Router

  High7.7
• CVE-2026-93489

  Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling…

  ASUS · Router

  High8.7
• CVE-2026-75779

  Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS router model allow…

  ASUS · Router

  High8.6
• CVE-2026-75753

  Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby user to send specific commands via HTTP requests, causing…

  ASUS · Router

  Medium5.3
• CVE-2026-17518

  Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial…

  ASUS · Router

  High8.2