An out-of-bounds write in certain ASUS Router firmware allows an unauthenticated nearby user to send an HTTP request containing parameters that…
An out-of-bounds write in certain ASUS Router firmware allows an unauthenticated nearby user to send an HTTP request containing parameters that exceed the buffer length, potentially overwriting other memory regions or causing the system to crash. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- ASUS
- Product
- Router firmware
- CVSS v4.0
- 7.1 AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Fix
- available
- Weakness
- CWE-787
- Exposure class
- Edge / VPN / firewall
- NVD status
- Received
Why it ranks 42 (Notable)
- CVSS v4.0 7.1 high
- Exposed product class: edge / VPN / firewall
- Fix available
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-88707 on this site · NVD · CVE.org · Vulnpedia