Live › vulnerability › CVE-2026-17518
Go to dashboardCertain ASUS router models do not check the size of input in an HTTP request, causing a buffer overflow. An adjacent authenticated user can corrupt device operations and cause a denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Owners of certain ASUS router models where the HTTP input handling is flawed. The sources do not list the affected models or firmware versions. Exposure requires an authenticated account on the device's adjacent network, so routers without untrusted local users are lower risk.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial of service via an HTTP request with input exceeding the expected length. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.
This page as .md · .json · in your agent: get_signal("CVE-2026-17518")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.