Critical severity9.8NVD Advisory· Published Feb 1, 2021· Updated Jun 17, 2026
CVE-2020-36109
CVE-2020-36109
Description
ASUS RT-AX86U router firmware below version under 9.0.0.4_386 has a buffer overflow in the blocking_request.cgi function of the httpd module that can cause code execution when an attacker constructs malicious data.
Affected products
3cpe:2.3:o:asus:rt-ax86u_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:asus:rt-ax86u_firmware:*:*:*:*:*:*:*:*range: <9.0.0.4_386
- (no CPE)
Patches
Vulnerability mechanics
References
1- www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/nvdVendor Advisory
News mentions
0No linked articles in our index yet.