VYPR

ASUS Router App

by Asus

CVEs (3)

  • CVE-2026-75779HigOct 23, 2026
    risk 0.56cvss —epss 0.01

    Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS router model allow an attacker to trick a logged-in administrator into visiting a phishing website, causing the router to execute…

  • CVE-2026-17518HigOct 20, 2026
    risk 0.53cvss —epss 0.00

    Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial of service via an HTTP request with input exceeding the expected length. Refer to the ' Security Update for ASUS Router…

  • CVE-2026-12960MedJul 3, 2026
    risk 0.39cvss —epss 0.00

    An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application on the same device to send a crafted Intent that causes ASUS Router App to open an specified URL. Refer to the ' Security Update for ASUS Router Android App '…