{"id":"CVE-2026-17518","kind":"vulnerability","aliases":["CVE-2026-17518"],"related":[],"title":"ASUS router firmware: oversized HTTP input corrupts device, denial of service","description":"Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial of service via an HTTP request with input exceeding the expected length.\nRefer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.","summary":"Certain ASUS router models do not check the size of input in an HTTP request, causing a buffer overflow. An adjacent authenticated user can corrupt device operations and cause a denial of service.","severity":"high","cvss":8.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["asus","firmware","infrastructure","router","self-hosted"],"not_affected_if":["no-untrusted-local-users"],"how_to_check":"- Identify ASUS router models and firmware versions in use; the sources do not list affected models or versions.\n- Compare the installed firmware against the ASUS Security Advisory for CVE-2026-17518 (unknown).","fix":"- Install the firmware update named in the ASUS Security Advisory 'Security Update for ASUS Router Firmware' (version unknown from sources).\n- Restrict access to the router admin interface to trusted users until patched.","status":"open","published_at":"2026-10-20T02:17:11+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","triaged_at":"2026-10-25T03:04:16+00:00","updated_at":"2026-10-25T03:04:16+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T03:04:16Z","model":"claude-haiku-5-5","output":{"fix":"- Install the firmware update named in the ASUS Security Advisory 'Security Update for ASUS Router Firmware' (version unknown from sources).\n- Restrict access to the router admin interface to trusted users until patched.","reach":"network","title":"ASUS router firmware: oversized HTTP input corrupts device, denial of service","impact":"medium","summary":"Certain ASUS router models do not check the size of input in an HTTP request, causing a buffer overflow. An adjacent authenticated user can corrupt device operations and cause a denial of service.","category":"infrastructure","nicknames":[],"who_cares":["asus","router","firmware","self-hosted"],"confidence":0.5,"needs_auth":"yes","worst_case":"Device operations corrupted and service denied; code execution not stated.","analyst_note":"Check the ASUS Security Advisory for affected models, fixed firmware versions, and whether code execution is possible.","how_to_check":"- Identify ASUS router models and firmware versions in use; the sources do not list affected models or versions.\n- Compare the installed firmware against the ASUS Security Advisory for CVE-2026-17518 (unknown).","needs_analyst":true,"not_affected_if":["no-untrusted-local-users"],"who_is_affected":"Owners of certain ASUS router models where the HTTP input handling is flawed. The sources do not list the affected models or firmware versions. Exposure requires an authenticated account on the device's adjacent network, so routers without untrusted local users are lower risk.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000612,"input_tokens":3330,"output_tokens":559,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-17518':14A,17A '-2026':13A,16A 'adjac':45B,72C 'advisori':109C 'allow':70C 'asus':1A,18B,26B,67C,101C,107C 'authent':46B,73C 'buffer':42B,58C 'caus':40B,53B,80C 'certain':25B,66C 'check':31B,61C 'copi':59C 'corrupt':7A,49B,76C 'cve':12A,15A 'denial':9A,55B,82C 'devic':8A,50B,77C 'exceed':91C 'expect':93C 'firmwar':3A,19B,103C 'host':24B 'http':5A,38B,87C 'inform':112C 'infrastructur':20B 'input':6A,35B,64C,90C 'length':94C 'model':28B,69C 'oper':51B,78C 'overflow':43B 'overs':4A 'refer':95C 'request':39B,88C 'router':2A,21B,27B,68C,102C 'section':104C 'secur':98C,108C 'self':23B 'self-host':22B 'servic':11A,57B,84C 'size':33B,62C 'updat':99C 'user':47B,74C 'via':85C 'without':60C","nicknames":[],"mitigations":[],"who_affected":"Owners of certain ASUS router models where the HTTP input handling is flawed. The sources do not list the affected models or firmware versions. Exposure requires an authenticated account on the device's adjacent network, so routers without untrusted local users are lower risk.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T02:17:11+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"54bf65a7-a193-42d2-b1ba-8e150d3c35e1","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-17518","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-17518","severity":null,"published_at":"2026-10-20T02:17:11+00:00","modified_at":"2026-10-20T20:17:24+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}