Skip to content
OpenAdvisories
High · 7.7 CVE-2026-75775 EUVD-2026-108610GHSA-76gg-39xw-6h7c

Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands …

Published Oct 23, 2026 · Updated Nov 2, 2026 · Assigned by ASUS

Description

Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges via crafted parameters sent to the router while the device is in its factory-default state.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.

Affected products

VendorProductAffectedFixed
ASUS Router 3.0.0.6.102 series, 3.0.0.4.386 series, 3.0.0.4.388 series —

References