Live › vulnerability › CVE-2026-75753
Go to dashboardCertain ASUS routers accept specific HTTP commands without authentication, so a nearby unauthorized user can get device identification information. The same commands switch the router into a specific mode that may prevent it from self-recovering after abnormal conditions.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Owners of the listed ASUS router models whose firmware predates the ASUS security update. The sources do not name the models or versions, and the flaw needs a nearby network position rather than internet access. Teams that do not run these ASUS routers can skip it.
No product ranges from the sources yet.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby user to send specific commands via HTTP requests, causing the router to return device identification information and switch into a specific mode. As a result, when the router encounters abnormal conditions, it may be unable to perform self-recovery. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.
This page as .md · .json · in your agent: get_signal("CVE-2026-75753")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.