[ Vendor · 14 CVEs ]
ASUS
CVEs affecting ASUS published in the last 30 days, plus any ASUS CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-17518 | 20 Oct 2026 | CVSS 8.2 | ASUS RouterBuffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause… | |
| CVE-2026-75753 | 20 Oct 2026 | CVSS 5.3 | ASUS RouterMissing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby user to send specific commands via HTTP… | |
| CVE-2026-102438 | 20 Oct 2026 | CVSS 8.5 | ASUS Armoury CrateAn uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via… | |
| CVE-2026-14911 | 7 Oct 2026 | CVSS 9.3 | ASUS RouterImproper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS router modules allows a remote attacker to read DOM… | |
| CVE-2026-19396 | 7 Oct 2026 | CVSS 7.7 | ASUS RouterA predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an… | |
| CVE-2026-16528 | 7 Oct 2026 | CVSS 8.4 | ASUS RouterInsertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker to obtain DDNS credentials from… | |
| CVE-2026-19386 | 7 Oct 2026 | CVSS 9.3 | ASUS RouterA stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration… | |
| CVE-2026-93495 | 1 Oct 2026 | CVSS 7.0 | ASUS Motherboard(PRIME Z390-A )Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially… | |
| CVE-2026-13313 | 1 Oct 2026 | CVSS 8.9 | ASUS RouterAn Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security… | |
| CVE-2026-14157 | 1 Oct 2026 | CVSS 9.4 | ASUS RouterUse of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a… | |
| CVE-2025-59374 | 17 Dec 2025 | CVSS 9.8 | ASUS Live Update Embedded Malicious Code"UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were distributed with unauthorized modifications introduced through a… | Exploited |
| CVE-2023-39780 | 11 Sep 2023 | CVSS 8.8 | ASUS RT-AX55 Routers OS Command InjectionOn ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist… | Exploited |
| CVE-2021-32030 | 6 May 2021 | CVSS 9.8 | ASUS Routers Improper AuthenticationThe administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication bypass… | Exploited |
| CVE-2021-32030 | 6 May 2021 | CVSS 9.8 | ASUS Routers Improper AuthenticationThe administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication bypass… | Exploited |