CVE-2026-88708 · Infrastructure
NO FIX YET
An off-by-one error in certain ASUS Router firmware lets an unauthenticated user nearby send a packet with a specific header length. The overwritten memory can crash the affected service.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Owners of the listed ASUS router models running affected firmware are exposed; the sources do not name the models or versions. The attack needs a nearby network position, not an account. Other vendors' routers and ASUS devices not on the advisory's list are not covered by this entry.
Not affected if unknown
Who cares asus, firmware, routers
Unknown from the sources.
No fix yet, per the sources.
An off-by-one error in certain ASUS Router firmware allows an unauthenticated nearby user to send a packet with a specific header length, potentially overwriting memory and causing the affected service to crash. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
This page as .md · .json · CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.