[ CVE-2026-75775 · Published 23 Oct 2026 ]
Vulnerability in ASUS Router
CVSS 7.7
EPSS <1%No fix listed yet
[ Description ]Official description
Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges via crafted parameters sent to the router while the device is in its factory-default state.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.