CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (Oct 29, 2026, 6:40 AM ET)

What this means for you

This week: 3,089 CVEs published, 232 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 3,089; Show in the list
Critical, last 7 days: 232; Show in the list
Healthcare-tagged, last 7 days: 9; Show in the list
Known exploited (CISA KEV): 1,762; Show in the list

Showing CVEs that name the product asus:router. Show all products

22 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2026-75775	High 7.7	Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges via crafted parameters sent to the rout… Assigned by ASUS	Oct 23, 2026
CVE-2026-93489	High 8.7	Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling the user to perform administrator operat… Assigned by ASUS	Oct 23, 2026
CVE-2026-75779	High 8.6	Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS router model allow an attacker to trick a logged-in adminis… Assigned by ASUS	Oct 23, 2026
CVE-2026-75753	Medium 5.3	Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby user to send specific commands via HTTP requests, causing the router to return device identificati… Assigned by ASUS	Oct 19, 2026
CVE-2026-17518	High 8.2	Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial of service via an HTTP request with inpu… Assigned by ASUS	Oct 19, 2026
CVE-2026-14911	Critical 9.3	Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS router modules allows a remote attacker to read DOM information, modify router settings, and cause a denia… Assigned by ASUS	Oct 6, 2026
CVE-2026-19396	High 7.7	A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated nearby user to derive the pairing token and… Assigned by ASUS	Oct 6, 2026
CVE-2026-19386	Critical 9.3	A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Re… Assigned by ASUS	Oct 6, 2026
CVE-2026-16528	High 8.4	Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker to obtain DDNS credentials from the system log, potentially enabling modification… Assigned by ASUS	Oct 6, 2026
CVE-2026-13313	High 8.9	An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security mechanisms and enable the Telnet service, thereby e… Assigned by ASUS	Sep 30, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.