{"id":"CVE-2026-88708","kind":"vulnerability","aliases":["CVE-2026-88708"],"related":[],"title":"ASUS router firmware: off-by-one packet flaw lets nearby attacker crash service","description":"An\noff-by-one error in certain ASUS Router firmware\nallows\nan unauthenticated nearby user to send a packet with a specific header\nlength, potentially overwriting memory and causing the\naffected service to crash.\nRefer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.","summary":"An off-by-one error in certain ASUS Router firmware lets an unauthenticated user nearby send a packet with a specific header length. The overwritten memory can crash the affected service.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["asus","firmware","infrastructure","routers"],"not_affected_if":["unknown"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T02:16:45+00:00","first_seen_at":"2026-11-10T02:49:23+00:00","triaged_at":"2026-11-10T02:50:06+00:00","updated_at":"2026-11-10T02:50:06+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T02:50:06Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"network","title":"ASUS router firmware: off-by-one packet flaw lets nearby attacker crash service","impact":"medium","summary":"An off-by-one error in certain ASUS Router firmware lets an unauthenticated user nearby send a packet with a specific header length. The overwritten memory can crash the affected service.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["asus","routers","firmware"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker crashes router service by overwriting memory remotely nearby","analyst_note":"Find the affected ASUS router models and fixed firmware versions in the ASUS Security Advisory section referenced by the NVD entry (https://nvd.nist.gov/vuln/detail/CVE-2026-88708).","how_to_check":"- unknown","plain_action":"Update your ASUS router's firmware through the ASUS Security Advisory's 'Security Update for ASUS Router Firmware' section.","product_name":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Owners of the listed ASUS router models running affected firmware are exposed; the sources do not name the models or versions. The attack needs a nearby network position, not an account. Other vendors' routers and ASUS devices not on the advisory's list are not covered by this entry.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000718,"input_tokens":4567,"output_tokens":522,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':16A,19A '-88708':17A,20A 'advisori':106C 'affect':55B,88C 'allow':68C 'asus':1A,21B,33B,65C,98C,104C 'attack':12A 'caus':86C 'certain':32B,64C 'crash':13A,53B,91C 'cve':15A,18A 'error':30B,62C 'firmwar':3A,22B,35B,67C,100C 'flaw':9A 'header':47B,80C 'inform':109C 'infrastructur':23B 'length':48B,81C 'let':10A,36B 'memori':51B,84C 'nearbi':11A,40B,71C 'off-by-on':4A,26B,58C 'one':7A,29B,61C 'overwrit':83C 'overwritten':50B 'packet':8A,43B,76C 'potenti':82C 'refer':92C 'router':2A,24B,34B,66C,99C 'section':101C 'secur':95C,105C 'send':41B,74C 'servic':14A,56B,89C 'specif':46B,79C 'unauthent':38B,70C 'updat':96C 'user':39B,72C","nicknames":[],"mitigations":[],"who_affected":"Owners of the listed ASUS router models running affected firmware are exposed; the sources do not name the models or versions. The attack needs a nearby network position, not an account. Other vendors' routers and ASUS devices not on the advisory's list are not covered by this entry.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["asus","firmware","infrastructure","medium","routers"],"campaign_type":null,"search_a":"'-2026':16A,19A '-88708':17A,20A 'asus':1A 'attack':12A 'crash':13A 'cve':15A,18A 'firmwar':3A 'flaw':9A 'let':10A 'nearbi':11A 'off-by-on':4A 'one':7A 'packet':8A 'router':2A 'servic':14A","search_b":"'affect':55B 'asus':21B,33B 'certain':32B 'crash':53B 'error':30B 'firmwar':22B,35B 'header':47B 'infrastructur':23B 'length':48B 'let':36B 'memori':51B 'nearbi':40B 'off-by-on':26B 'one':29B 'overwritten':50B 'packet':43B 'router':24B,34B 'send':41B 'servic':56B 'specif':46B 'unauthent':38B 'user':39B","search_c":"'advisori':106C 'affect':88C 'allow':68C 'asus':65C,98C,104C 'caus':86C 'certain':64C 'crash':91C 'error':62C 'firmwar':67C,100C 'header':80C 'inform':109C 'length':81C 'memori':84C 'nearbi':71C 'off-by-on':58C 'one':61C 'overwrit':83C 'packet':76C 'potenti':82C 'refer':92C 'router':66C,99C 'section':101C 'secur':95C,105C 'send':74C 'servic':89C 'specif':79C 'unauthent':70C 'updat':96C 'user':72C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T02:16:45+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"54bf65a7-a193-42d2-b1ba-8e150d3c35e1","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-88708","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88708","severity":null,"published_at":"2026-11-10T02:16:45+00:00","modified_at":"2026-11-10T02:16:45+00:00","first_seen_at":"2026-11-10T02:49:23+00:00","fetched_at":"2026-11-10T02:49:23+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}