Skip to content
OpenAdvisories
High · 8.4 CVE-2026-16528 EUVD-2026-94156GHSA-jh3c-v2fg-3q6f

Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker to obtain DDNS creden…

Published Oct 7, 2026 · Updated Oct 21, 2026 · Assigned by ASUS

Description

Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker to obtain DDNS credentials from the system log, potentially enabling modification of DNS settings.Refer to the ' Security Update for ASUS Router Firmware  ' section on the ASUS Security Advisory for more information.

Affected products

VendorProductAffectedFixed
ASUS Router 3.0.0.4.386 series, 3.0.0.4.388 series, 3.0.0.6.102 series —

References