Router at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 11 | 3 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 2 | 1 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 1 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 8 | 1 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 1 | 1 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 2 | 0 |
| Dec 2024 | 0 | 0 |
25 results · Feed
-
High 7.7
Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute…
-
High 8.7CVE-2026-93489 Public exploit
Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge …
-
High 8.6
Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forge…
-
Medium 5.3
Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby user to send spec…
-
High 8.2
Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corru…
-
Critical 9.3
Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS router modules allows a re…
-
High 7.7
A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE…
-
Critical 9.3
A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code …
-
High 8.4
Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker t…
-
High 8.9
An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP…
-
Critical 9.4
Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute a…
-
Critical 9.5
An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS router models allow…
-
Medium 5.9
Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") in the web management interface of…
-
High 8.6
An OS command injection vulnerability in the web management interface of certain ASUS router models allows remote authe…
-
Medium 6.9
A path traversal vulnerability has been identified in certain router models. A remote, authenticated attacker could exp…
-
High 7.5
An authentication bypass vulnerability has been identified in the IFTTT integration feature. A remote, authenticated at…
-
High 7.5
A command injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vu…
-
Medium 5.9
A SQL injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vulner…
-
Medium 6.0
An integer underflow vulnerability has been identified in Aicloud. An authenticated attacker may trigger this vulnerabi…
-
High 8.2
A path traversal vulnerability has been identified in WebDAV, which may allow unauthenticated remote attackers to impac…
-
Medium 6.9
A stack buffer overflow vulnerability has been identified in certain router models. An authenticated attacker may trigg…
-
Critical 9.2CVE-2025-59366 EPSS 12%
An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side eff…
-
Critical 9.2CVE-2025-2492 Public exploit
An improper authentication control vulnerability exists in AiCloud. This vulnerability can be triggered by a crafted re…
-
High 7.2
An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary com…
-
High 7.2CVE-2024-12912 Public exploit
An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution. …