Live › vulnerability › CVE-2026-75779
Go to dashboardAn ASUS router model has an OS command injection flaw combined with CSRF. An attacker tricks a logged-in administrator into visiting a phishing site, and the router then runs attacker-chosen commands as root.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Identify the ASUS router model and current firmware version in the admin UI; compare against the ASUS Security Advisory affected list.
Update the router to the firmware version named in the ASUS Security Advisory; unknown whether a fixed version is listed in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS router model allow an attacker to trick a logged-in administrator into visiting a phishing website, causing the router to execute arbitrary commands with root privileges. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
This page as .md · .json · in your agent: get_signal("CVE-2026-75779")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.