{"schema_version":1,"title":"ASUS Router Firmware vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 12 vulnerabilities in ASUS Router Firmware: 4 in the last 7 days and 10 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-88710, was published on 10 November 2026. 4 vulnerabilities in the last four weeks, up 100% on the four before (2).","url":"https://junglewise.ai/threats/technologies/router-firmware","json_url":"https://junglewise.ai/threats/technologies/router-firmware.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/router-firmware","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":1,"all_time":12,"critical":0,"exploited":0,"last_7_days":4,"last_30_days":8,"last_90_days":10,"last_365_days":12},"latest":[{"cve":"CVE-2026-88710","slug":"cve-2026-88710-improper-neutralization-of-special-elements-used-in-an-os-command","title":"ASUS Router firmware OS command injection","severity":"info","exploited":false,"published_at":"2026-11-10T02:16:45.963+00:00","url":"https://junglewise.ai/threats/cve-2026-88710-improper-neutralization-of-special-elements-used-in-an-os-command"},{"cve":"CVE-2026-88709","slug":"cve-2026-88709-improper-neutralization-of-special-elements-used-in-an-os-command","title":"ASUS Router firmware command injection via USB device","severity":"info","exploited":false,"published_at":"2026-11-10T02:16:45.827+00:00","url":"https://junglewise.ai/threats/cve-2026-88709-improper-neutralization-of-special-elements-used-in-an-os-command"},{"cve":"CVE-2026-88708","slug":"cve-2026-88708-an-off-by-one-error-in-certain-asus-router-firmware-allows-an","title":"ASUS Router firmware off-by-one error in packet handling","severity":"info","exploited":false,"published_at":"2026-11-10T02:16:45.68+00:00","url":"https://junglewise.ai/threats/cve-2026-88708-an-off-by-one-error-in-certain-asus-router-firmware-allows-an"},{"cve":"CVE-2026-88707","slug":"cve-2026-88707-an-out-of-bounds-write-in-certain-asus-router-firmware-allows-an","title":"ASUS Router firmware out-of-bounds write vulnerability","severity":"info","exploited":false,"published_at":"2026-11-10T02:16:45.513+00:00","url":"https://junglewise.ai/threats/cve-2026-88707-an-out-of-bounds-write-in-certain-asus-router-firmware-allows-an"},{"cve":"CVE-2026-84730","slug":"cve-2026-84730-stack-based-buffer-overflow-in-certain-asus-router-firmware","title":"ASUS Router stack-based buffer overflow in AiCloud","severity":"info","exploited":false,"published_at":"2026-11-04T02:17:21.323+00:00","url":"https://junglewise.ai/threats/cve-2026-84730-stack-based-buffer-overflow-in-certain-asus-router-firmware"},{"cve":"CVE-2026-84729","slug":"cve-2026-84729-out-of-bounds-write-in-certain-asus-router-firmware-allow-an","title":"ASUS Router firmware out-of-bounds write","severity":"info","exploited":false,"published_at":"2026-11-04T02:17:21.163+00:00","url":"https://junglewise.ai/threats/cve-2026-84729-out-of-bounds-write-in-certain-asus-router-firmware-allow-an"},{"cve":"CVE-2026-93489","slug":"cve-2026-93489-improper-authentication-in-asus-router-modules-allows-an","title":"ASUS router modules improper authentication in firmware","severity":"info","exploited":false,"published_at":"2026-10-23T08:16:55.72+00:00","url":"https://junglewise.ai/threats/cve-2026-93489-improper-authentication-in-asus-router-modules-allows-an"},{"cve":"CVE-2026-17518","slug":"cve-2026-17518-buffer-copy-without-checking-size-of-input-in-certain-asus-router","title":"ASUS router buffer overflow in HTTP request handling","severity":"info","exploited":false,"published_at":"2026-10-20T02:17:11.307+00:00","url":"https://junglewise.ai/threats/cve-2026-17518-buffer-copy-without-checking-size-of-input-in-certain-asus-router"},{"cve":"CVE-2026-14911","slug":"cve-2026-14911-improper-neutralization-of-input-during-web-page-generation-cross","title":"ASUS router modules stored cross-site scripting","severity":"info","exploited":false,"published_at":"2026-10-07T03:16:58.67+00:00","url":"https://junglewise.ai/threats/cve-2026-14911-improper-neutralization-of-input-during-web-page-generation-cross"},{"cve":"CVE-2026-13313","epss":0.0068,"slug":"cve-2026-13313-an-active-debug-code-vulnerability-in-certain-asus-router-models","title":"ASUS router active debug code remote command execution","severity":"info","exploited":false,"published_at":"2026-10-01T02:16:53.817+00:00","url":"https://junglewise.ai/threats/cve-2026-13313-an-active-debug-code-vulnerability-in-certain-asus-router-models"},{"cve":"CVE-2026-13385","cvss":9.5,"slug":"cve-2026-13385-asus-router-remote-command-execution-via-improper-certificate","title":"ASUS Router remote command execution via improper certificate validation","severity":"info","exploited":false,"published_at":"2026-07-15T02:18:12.09+00:00","url":"https://junglewise.ai/threats/cve-2026-13385-asus-router-remote-command-execution-via-improper-certificate"},{"cve":"CVE-2025-15101","cvss":8.8,"slug":"cve-2025-15101-asus-router-firmware-os-command-injection-in-web-management","title":"ASUS Router Firmware OS command injection in web management interface","severity":"high","exploited":false,"published_at":"2026-03-26T03:16:02.4+00:00","url":"https://junglewise.ai/threats/cve-2025-15101-asus-router-firmware-os-command-injection-in-web-management"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":4}],"related":[{"name":"ASUS Armoury Crate","slug":"armoury-crate","vulnerabilities":15,"url":"https://junglewise.ai/threats/technologies/armoury-crate"},{"name":"ASUS Router","slug":"asus-router","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/asus-router"},{"name":"ASUS System Control Interface","slug":"system-control-interface","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/system-control-interface"},{"name":"ASUS Business Manager","slug":"business-manager","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/business-manager"},{"name":"ASUS AI Suite 3","slug":"ai-suite-3","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/ai-suite-3"},{"name":"ASUS System Control Interface v3","slug":"system-control-interface-v3","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/system-control-interface-v3"}],"technology":{"hub":true,"name":"ASUS Router Firmware","slug":"router-firmware","vendor":{"hub":true,"name":"ASUS","slug":"asus","url":"https://junglewise.ai/threats/vendors/asus"},"aliases":[],"category":"firmware","homepage":"https://www.asus.com/networking-iot-servers/wifi-routers/all-series/","description":"Firmware for ASUS routers providing network connectivity and management functionality.","url":"https://junglewise.ai/threats/technologies/router-firmware"},"most_severe":[{"cve":"CVE-2025-15101","cvss":8.8,"slug":"cve-2025-15101-asus-router-firmware-os-command-injection-in-web-management","title":"ASUS Router Firmware OS command injection in web management interface","severity":"high","exploited":false,"published_at":"2026-03-26T03:16:02.4+00:00","url":"https://junglewise.ai/threats/cve-2025-15101-asus-router-firmware-os-command-injection-in-web-management"},{"cve":"CVE-2026-13385","cvss":9.5,"slug":"cve-2026-13385-asus-router-remote-command-execution-via-improper-certificate","title":"ASUS Router remote command execution via improper certificate validation","severity":"info","exploited":false,"published_at":"2026-07-15T02:18:12.09+00:00","url":"https://junglewise.ai/threats/cve-2026-13385-asus-router-remote-command-execution-via-improper-certificate"},{"cve":"CVE-2026-13313","epss":0.0068,"slug":"cve-2026-13313-an-active-debug-code-vulnerability-in-certain-asus-router-models","title":"ASUS router active debug code remote command execution","severity":"info","exploited":false,"published_at":"2026-10-01T02:16:53.817+00:00","url":"https://junglewise.ai/threats/cve-2026-13313-an-active-debug-code-vulnerability-in-certain-asus-router-models"},{"cve":"CVE-2026-88710","slug":"cve-2026-88710-improper-neutralization-of-special-elements-used-in-an-os-command","title":"ASUS Router firmware OS command injection","severity":"info","exploited":false,"published_at":"2026-11-10T02:16:45.963+00:00","url":"https://junglewise.ai/threats/cve-2026-88710-improper-neutralization-of-special-elements-used-in-an-os-command"},{"cve":"CVE-2026-88709","slug":"cve-2026-88709-improper-neutralization-of-special-elements-used-in-an-os-command","title":"ASUS Router firmware command injection via USB device","severity":"info","exploited":false,"published_at":"2026-11-10T02:16:45.827+00:00","url":"https://junglewise.ai/threats/cve-2026-88709-improper-neutralization-of-special-elements-used-in-an-os-command"},{"cve":"CVE-2026-88708","slug":"cve-2026-88708-an-off-by-one-error-in-certain-asus-router-firmware-allows-an","title":"ASUS Router firmware off-by-one error in packet handling","severity":"info","exploited":false,"published_at":"2026-11-10T02:16:45.68+00:00","url":"https://junglewise.ai/threats/cve-2026-88708-an-off-by-one-error-in-certain-asus-router-firmware-allows-an"},{"cve":"CVE-2026-88707","slug":"cve-2026-88707-an-out-of-bounds-write-in-certain-asus-router-firmware-allows-an","title":"ASUS Router firmware out-of-bounds write vulnerability","severity":"info","exploited":false,"published_at":"2026-11-10T02:16:45.513+00:00","url":"https://junglewise.ai/threats/cve-2026-88707-an-out-of-bounds-write-in-certain-asus-router-firmware-allows-an"},{"cve":"CVE-2026-84730","slug":"cve-2026-84730-stack-based-buffer-overflow-in-certain-asus-router-firmware","title":"ASUS Router stack-based buffer overflow in AiCloud","severity":"info","exploited":false,"published_at":"2026-11-04T02:17:21.323+00:00","url":"https://junglewise.ai/threats/cve-2026-84730-stack-based-buffer-overflow-in-certain-asus-router-firmware"},{"cve":"CVE-2026-84729","slug":"cve-2026-84729-out-of-bounds-write-in-certain-asus-router-firmware-allow-an","title":"ASUS Router firmware out-of-bounds write","severity":"info","exploited":false,"published_at":"2026-11-04T02:17:21.163+00:00","url":"https://junglewise.ai/threats/cve-2026-84729-out-of-bounds-write-in-certain-asus-router-firmware-allow-an"},{"cve":"CVE-2026-93489","slug":"cve-2026-93489-improper-authentication-in-asus-router-modules-allows-an","title":"ASUS router modules improper authentication in firmware","severity":"info","exploited":false,"published_at":"2026-10-23T08:16:55.72+00:00","url":"https://junglewise.ai/threats/cve-2026-93489-improper-authentication-in-asus-router-modules-allows-an"}],"generated_at":"2026-11-11T03:07:00.183524+00:00"}