Asus Router vulnerabilities

• asus router firmware Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attacker to... CVE-2026-84729 7.2 HighNovember 4, 2026
• asus router firmware Stack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated nearby... CVE-2026-84730 8.7 HighNovember 4, 2026
• asus router Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows... CVE-2026-75775 7.7 HighOctober 23, 2026
• asus router Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an... CVE-2026-93489 Public exploit 8.7 HighOctober 23, 2026
• asus router Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and... CVE-2026-75779 8.6 HighOctober 23, 2026
• asus router Missing Authentication for a Critical Function  in certain ASUS routers allows an unauthorized... CVE-2026-75753 5.3 MediumOctober 20, 2026
• asus router Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent... CVE-2026-17518 8.2 HighOctober 20, 2026
• @tanstack react-start, solid-start, start-server-core +2 more +4 more TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses CVE-2026-102989 Fix available 9.3 CriticalOctober 13, 2026
• asus router Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS... CVE-2026-14911 9.3 CriticalOctober 7, 2026
• asus router A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token... CVE-2026-19396 7.7 HighOctober 7, 2026
• asus router A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to... CVE-2026-19386 9.3 CriticalOctober 7, 2026
• asus router Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote... CVE-2026-16528 8.4 HighOctober 7, 2026
• asus router An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated... CVE-2026-13313 8.9 HighOctober 1, 2026
• asus router Use of an Externally Controlled Format String in the ASUS Router modules allow a remote... CVE-2026-14157 9.4 CriticalOctober 1, 2026
• @angular router, angular +1 more Angular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR) CVE-2026-101896 Fix available 8.2 HighSeptember 30, 2026
• asus router TRENDnet Router ping.cgi command injection CVE-2026-75985 5.3 MediumAugust 19, 2026
• asus router An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain... CVE-2026-13385 9.5 CriticalJuly 15, 2026
• asus router Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") in the web... CVE-2026-11851 5.9 MediumJuly 15, 2026
• asus router app An Improper Export of Android Application Components vulnerability in ASUS Router App allows a... CVE-2026-12960 Public exploit 6.0 MediumJuly 3, 2026
• asus firmware, router +1 more A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Web management... CVE-2025-15101 8.6 HighMarch 26, 2026
• asus router A path traversal vulnerability has been identified in certain router models. A remote,... CVE-2025-59372 6.9 MediumNovember 25, 2025
• asus router An authentication bypass vulnerability has been identified in the IFTTT integration feature. A... CVE-2025-59371 7.5 HighNovember 25, 2025
• asus router A command injection vulnerability has been identified in bwdpi. A remote, authenticated attacker... CVE-2025-59370 7.5 HighNovember 25, 2025
• asus router A SQL injection vulnerability has been identified in bwdpi. A remote, authenticated attacker... CVE-2025-59369 5.9 MediumNovember 25, 2025
• asus router An integer underflow vulnerability has been identified in Aicloud. An authenticated attacker may... CVE-2025-59368 6.0 MediumNovember 25, 2025
• asus router A path traversal vulnerability has been identified in WebDAV, which may allow unauthenticated... CVE-2025-12003 8.2 HighNovember 25, 2025
• asus router A stack buffer overflow vulnerability has been identified in certain router models. An... CVE-2025-59365 6.9 MediumNovember 25, 2025
• asus router An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by... CVE-2025-59366 EPSS 12.5% 9.2 CriticalNovember 25, 2025
• apollographql router Apollo Router Core: Access Control Bypass on Polymorphic Types CVE-2025-64173 Fix available 7.5 HighNovember 6, 2025
• apollographql router Apollo Router Improperly Enforces Renamed Access Control Directives CVE-2025-64347 Fix available 7.5 HighNovember 6, 2025
• asus router An improper authentication control vulnerability exists in AiCloud. This vulnerability can be... CVE-2025-2492 Public exploit 9.2 CriticalApril 18, 2025
• apollographql router Apollo Router Query Validation Vulnerable to Excessive Resource Consumption via Named Fragment Processing CVE-2025-32380 Fix available 7.5 HighApril 7, 2025
• apollographql router Apollo Router Operation Limits Vulnerable to Bypass via Integer Overflow CVE-2025-32033 Fix available 7.5 HighApril 7, 2025
• apollographql router Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment Expansion CVE-2025-32034 Fix available 7.5 HighApril 7, 2025
• apollographql router Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass CVE-2025-32032 Fix available 7.5 HighApril 7, 2025
• asus router An unintended entry point vulnerability has been identified in certain router models, which may... CVE-2024-13062 7.2 HighJanuary 2, 2025
• asus router An improper input insertion vulnerability in AiCloud on certain router models may lead to... CVE-2024-12912 Public exploit 7.2 HighJanuary 2, 2025
• apollographql apollo router, router, apollo-router +1 more +3 more Apollo Router Coprocessors may cause Denial-of-Service when handling request bodies CVE-2024-43783 Fix available 7.5 HighAugust 27, 2024
• apollographql apollo router, router +1 more Defect in query plan cache may cause incorrect operations to be executed in Apollo Router CVE-2024-32971 Fix available 9.1 CriticalMay 2, 2024
• apollographql apollo router, router +1 more Apollo Router's Compressed Payloads do not respect HTTP Payload Limits CVE-2024-28101 Fix available 7.5 HighMarch 6, 2024
• asus router, uniwayinfo uw-101x firmware, uw-301vpw firmware +3 more +5 more Uniway Router Administrative Web Interface reliance on ip address for authentication CVE-2023-7211 5.6 MediumJanuary 7, 2024
• asus router, uniwayinfo uw-101x firmware, uw-301vpw firmware +3 more +5 more Uniway Router Device Reset device_reset.cgi denial of service CVE-2023-7209 7.5 HighJanuary 7, 2024
• apollographql apollo router, router, apollo helms-charts router +2 more Improper Check or Handling of Exceptional Conditions in apollo-router CVE-2023-45812 Fix available 7.5 HighOctober 18, 2023
• asus rt-ax55, rt-ax55 routers, rt-ax55 firmware +2 more ASUS RT-AX55 v3.0.0.4.386.51598 was discovered to contain an authenticated command injection... CVE-2023-39780 In KEVPublic exploit EPSS 39.5% 8.8 HighSeptember 11, 2023
• apollographql apollo router, router +1 more Unnamed "Subscription" operation results in Denial-of-Service in apollographql/router CVE-2023-41317 Fix available 7.5 HighSeptember 5, 2023
• asus gt-ac2900 firmware, lyra mini firmware, routers +2 more The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 allows... CVE-2021-32030 In KEV EPSS 99.4% 9.8 CriticalMay 6, 2021