Skip to content
OpenAdvisories

Vendor

ASUS

190 known vulnerabilities.

ASUS at a glance

Last 12 months
75
Critical · all time
19
Exploited · all time
2
Public exploit · all time
15
New vulnerabilities per month · last 12 months
0 10 20 December 2025: 3 vulnerabilities, 1 critical Dec 2025 January 2026: 1 vulnerability February 2026: 1 vulnerability March 2026: 4 vulnerabilities Mar April 2026: 2 vulnerabilities May 2026: 4 vulnerabilities June 2026: 1 vulnerability Jun July 2026: 13 vulnerabilities, 1 critical August 2026: 2 vulnerabilities September 2026: 12 vulnerabilities, 1 critical Sep October 2026: 14 vulnerabilities, 3 critical November 2026: 8 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202680
Oct 2026143
Sep 2026121
Aug 202620
Jul 2026131
Jun 202610
May 202640
Apr 202620
Mar 202640
Feb 202610
Jan 202610
Dec 202531
Nov 2025112
Oct 202530
Sep 202500
Aug 202510
Jul 202520
Jun 202510
May 202531
Apr 202511
Mar 202510
Feb 202510
Jan 202540
Dec 202410

Products

Router 25 Armoury Crate 24 BMC firmware for Z10PR-D16 18 BMC firmware for ASMB8-iKVM 18 BMC firmware for Z10PE-D16 WS 18 BMC firmware for ASMB9-iKVM 17 BMC firmware for RS720A-E9-RS24-E 17 BMC firmware for RS700A-E9-RS4 17 BMC firmware for RS700-E9-RS4 17 BMC firmware for ESC4000 G4X 17 BMC firmware for RS700-E9-RS12 17 BMC firmware for RS100-E10-PI2 17 BMC firmware for RS300-E10-PS4 17 BMC firmware for RS300-E10-RS4 17 BMC firmware for RS500A-E9-PS4 17 BMC firmware for RS500A-E9-RS4 17 BMC firmware for E700 G4 17 BMC firmware for WS C422 PRO/SE 17 BMC firmware for WS X299 PRO/SE 17 BMC firmware for Z11PA-U12 17 BMC firmware for Z11PA-U12/10G-2S 17 BMC firmware for KNPA-U16 17 BMC firmware for ESC4000 DHD G4 17 BMC firmware for ESC4000 G4 17 BMC firmware for RS720Q-E9-RS24-S 17 BMC firmware for RS720Q-E9-RS8 17 BMC firmware for RS720Q-E9-RS8-S 17 BMC firmware for Z11PA-D8 17 BMC firmware for Z11PA-D8C 17 BMC firmware for RS720-E9-RS24-U 17 BMC firmware for RS720-E9-RS8-G 17 BMC firmware for RS500-E9-PS4 17 BMC firmware for Pro E800 G4 17 BMC firmware for RS500-E9-RS4 17 BMC firmware for RS500-E9-RS4-U 17 BMC firmware for RS520-E9-RS12-E 17 BMC firmware for RS520-E9-RS8 17 BMC firmware for ESC8000 G4 17 BMC firmware for ESC8000 G4/10G 17 BMC firmware for RS720-E9-RS12-E 17

Latest advisories

  • High max 7.3
    VA-26-202-01 1 CVE

    ASUS AURA SYNC driver local privilege escalation

    Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a local user to bypass the driver's verification and invoke arbitrary IOCTLs, resulting in privilege escalation.

    ASUS
  • High max 9.4
    NCSC-2025-0148 2 CVEs

    Kwetsbaarheden verholpen in ASUS DriverHub

    ASUS heeft kwetsbaarheden verholpen in ASUS DriverHub

    ASUS
All Critical High Medium Low Exploited only Public exploit

190 results · Feed

  • Medium 5.3
    CVE-2026-88708

    An off-by-one error in certain ASUS Router firmware allows an unauthenticated nearby user to send a packet with a speci…

    ASUS Router firmware
  • High 7.1
    CVE-2026-88707

    An out-of-bounds write in certain ASUS Router firmware allows an unauthenticated nearby user to send an HTTP request co…

    ASUS Router firmware
  • High 8.7
    CVE-2026-88710

    Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an unauthentic…

    ASUS Router firmware
  • High 7.0
    CVE-2026-88709

    Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an user with p…

    ASUS Router firmware
  • High 7.2
    CVE-2026-84729

    Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attacker to write data beyond the i…

    ASUS Router firmware
  • High 8.7
    CVE-2026-84730

    Stack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated nearby attacker to execute arbitr…

    ASUS Router firmware
  • High 8.5
    CVE-2026-112116

    An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user …

    ASUS System Control Interface
  • Medium 6.9
    CVE-2026-110464

    Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry l…

    ASUS Armoury Crate
  • Medium 6.8
    CVE-2026-88781

    Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an…

    ASUS motherboards firmware
  • High 7.7
    CVE-2026-75775

    Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute…

    ASUS Router
  • High 8.7
    CVE-2026-93489 Public exploit

    Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge …

    ASUS Router
  • High 8.6
    CVE-2026-75779

    Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forge…

    ASUS Router
  • Medium 5.3
    CVE-2026-75753

    Missing Authentication for a Critical Function  in certain ASUS routers allows an unauthorized nearby user to send spec…

    ASUS Router
  • High 8.2
    CVE-2026-17518

    Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corru…

    ASUS Router
  • High 8.5
    CVE-2026-102438

    An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code wi…

    ASUS Armoury Crate Armoury Crate SE
  • Critical 9.3
    CVE-2026-14911

    Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS router modules allows a re…

    ASUS Router
  • High 7.7
    CVE-2026-19396

    A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE…

    ASUS Router
  • Critical 9.3
    CVE-2026-19386

    A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code …

    ASUS Router
  • High 8.4
    CVE-2026-16528

    Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker t…

    ASUS Router
  • High 8.9
    CVE-2026-13313

    An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP…

    ASUS Router
  • Critical 9.4
    CVE-2026-14157

    Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute a…

    ASUS Router
  • High 7.0
    CVE-2026-93495

    Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary m…

    ASUS Motherboard(ROG MAXIMUS XI FORMULA ) Motherboard(ROG MAXIMUS XI EXTREME ) Motherboard(ROG MAXIMUS XI GENE )
  • High 7.7
    CVE-2026-19397

    Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby us…

    ASUS Control Center Express Agent
  • Medium 5.3
    CVE-2026-12962

    A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a loca…

    ASUS Armoury Crate
  • Medium 5.7
    CVE-2026-18023

    Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose…

    ASUS Armoury Crate
  • Low 2.0
    CVE-2026-16003

    Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process …

    ASUS Armoury Crate
  • Medium 5.9
    CVE-2026-16004

    Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary …

    ASUS Armoury Crate
  • Medium 5.8
    CVE-2026-16005

    Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a craf…

    ASUS Armoury Crate
  • Medium 5.7
    CVE-2026-16006

    Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user …

    ASUS Armoury Crate
  • Medium 5.7
    CVE-2026-75808

    Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to cause a denial-of-ser…

    ASUS Armoury Crate
  • Medium 5.9
    CVE-2026-75809

    Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and …

    ASUS Armoury Crate
  • Medium 5.7
    CVE-2026-75810

    Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassin…

    ASUS Armoury Crate
  • Medium 5.8
    CVE-2026-75811

    Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a local user to modify ha…

    ASUS Armoury Crate
  • Critical 10.0
    CVE-2026-75754

    Missing Authentication for Critical Function, Server-Side Request Forgery (SSRF), and Use of Hard-coded Credentials in …

    ASUS Control Center Enterprise (ACC)
  • Medium 6.8
    CVE-2026-19398

    An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local  administrator to cau…

    ASUS FA507NV FA507NU
  • High 8.4
    CVE-2026-8917

    Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a…

    ASUS GPUTweakII VGAdll GPU Tweak III
  • High 7.3
    CVE-2026-16727

    Concurrent Execution using Shared Resource with Improper Synchronization (“Race Condition”) in ASUS Armoury Crate allow…

    ASUS Armoury Crate
  • High 7.3
    CVE-2019-25764

    **UNSUPPORTED WHEN ASSIGNED**  Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a loc…

    ASUS AURA SYNC
  • Critical 9.5
    CVE-2026-13385

    An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS router models allow…

    ASUS Router
  • High 8.4
    CVE-2026-15029

    Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Man…

    ASUS System Control Interface Business Manager System Control Interface v3