Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-88708 EUVD-2026-120743GHSA-mp22-2w3w-8v5f

An off-by-one error in certain ASUS Router firmware allows an unauthenticated nearby user to send a packet with a specific header length, p…

Published Nov 10, 2026 · Updated Nov 10, 2026 · Assigned by ASUS

Description

An
off-by-one error in certain ASUS Router firmware
allows
an unauthenticated nearby user to send a packet with a specific header
length, potentially overwriting memory and causing the
affected service to crash.
Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.

Affected products

VendorProductAffectedFixed
ASUS Router firmware 3.0.0.4.386 series, 3.0.0.4.388 series, 3.0.0.6.102 series —

References