Live › vulnerability › CVE-2026-84730
Certain ASUS router firmware has a stack-based buffer overflow triggered by a crafted device name. An unauthenticated attacker on a nearby network can execute arbitrary commands with root privileges on the router.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-04 02:46 UTC. All times on this page are UTC.
ASUS routers running the 3.0.0.4_386, 3.0.0.4_388 or 3.0.0.6_102 firmware series are listed by ASUS in its AiCloud Feature bulletin. The attacker must be on a nearby (adjacent) network, not the internet, and needs no login. ASUS's listing does not state which models are included or whether turning AiCloud off avoids the bug, so check the bulletin for your model.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| ASUS Router firmware | vendor | 3.0.0.4_386 series, 3.0.0.4_388 series, 3.0.0.6_102 series | – |
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Stack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated nearby attacker to execute arbitrary commands with root privileges via a crafted device name. Refer to the ' Security Update for ASUS Router AiCloud Feature ' section on the ASUS Security Advisory for more information.
This page as .md · .json · in your agent: get_signal("CVE-2026-84730")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.