Details
- Type
- Authentication Bypass
- Impact
- Information Disclosure, Data Tampering
- CVSS vector
- CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Published
- 7 October 2026
- Updated
- 15 October 2026
- Weakness
- CWE-337
Vendor fix
Update to the latest ASUS router firmware as per ASUS Security Advisory.
Patching closes this CVE. It does not tell you which of your systems run the affected version, or what else is exposed alongside them.