CVE-2026-88709

Vendor

ASUS

Product

Router firmware

CVSS v4.0

7.0 AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-78

Exposure class

Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 42
   CVE NVD 3h ago

   Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an user with physical access to insert a USB…

   Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an user with physical access to insert a USB device containing a specially crafted directory name, potentially executing…

   CVSS 7.0 Fix available CVE-2026-88709 ASUS