ASUS Router vulnerabilities

CVEs per yearBy the year they were published

1. 202510
2. 20252
3. 202613

Newest CVEs

• CVE-2026-75775

  Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges…

  ASUS · Router

  High7.7
• CVE-2026-93489

  Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling…

  ASUS · Router

  High8.7
• CVE-2026-75779

  Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS router model allow…

  ASUS · Router

  High8.6
• CVE-2026-75753

  Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby user to send specific commands via HTTP requests, causing…

  ASUS · Router

  Medium5.3
• CVE-2026-17518

  Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial…

  ASUS · Router

  High8.2
• CVE-2026-14911

  Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS router modules allows a remote attacker to read DOM information,…

  ASUS · Router

  Critical9.3
• CVE-2026-19396

  A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated…

  ASUS · Router

  High7.7
• CVE-2026-19386

  A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload…

  ASUS · Router

  Critical9.3
• CVE-2026-16528

  Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker to obtain DDNS credentials from the…

  ASUS · Router

  High8.4
• CVE-2026-13313

  An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security mechanisms…

  ASUS · Router

  High8.9