7.0Yüksek

CVE-2026-88709

ASUS Router firmware Yayım: (2 gün önce)

Açıklama

Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an user with physical access to insert a USB device containing a specially crafted directory name, potentially executing arbitrary commands with root privileges. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.

Zayıflık türü (CWE): CWE-78

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
ASUS Router firmware 3.0.0.4.386 series, 3.0.0.4.388 series, 3.0.0.6.102 series

Kaynaklar ve yamalar