Skip to content
OpenAdvisories
Critical · 9.4 CVE-2026-14157 EUVD-2026-90453GHSA-j8q5-whhx-5847

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands vi…

Published Oct 1, 2026 · Updated Oct 2, 2026 · Assigned by ASUS

Description

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface.

Affected products

VendorProductAffectedFixed
ASUS Router 3.0.0.6_102 series —

References