8.7Hoch

CVE-2026-88710

ASUS Router firmware Veröffentlicht: (vor 2 Tagen)

Beschreibung

Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an unauthenticated nearby user to trigger a chain of actions—unauthenticated queries, identifier guessing, credential overwriting, and command injection—resulting in the execution of arbitrary commands with root privileges. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.

Schwachstellentyp (CWE): CWE-78

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
ASUS Router firmware 3.0.0.4.386 series, 3.0.0.4.388 series, 3.0.0.6.102 series

Referenzen und Patches