Affected Vendors This Week
- Fortinet: 12 CVEs (1 high, 4 medium)
- ASUS: 9 CVEs (all unrated/none severity)
- Cisco: 7 CVEs (6 high, 1 medium)
- Netgear: 6 CVEs (all unrated/none severity)
- OpenWrt / DD-WRT: 3 CVEs (1 critical, 1 high, 1 medium)
- TP-Link: 2 CVEs (all unrated/none severity)
- Digi: 1 CVE (unrated)
Critical Priority: OpenWrt Remote Code Execution
This week's only critical vulnerability demands immediate attention. CVE-2026-62948 (CVSS 9.6) affects OpenWrt versions prior to 25.12.5 and involves unsafe handling of DHCPv6 client FQDN hostnames in the odhcpd daemon. The vulnerability allows attackers to write unsanitized input to /tmp/odhcpd.leases, potentially enabling remote code execution on affected devices.
Action: If you manage OpenWrt deployments, prioritize upgrading to version 25.12.5 or later immediately. This applies to any embedded devices running older OpenWrt releases, including home routers, access points, and edge gateways.
High-Severity Cisco RoomOS Cluster
Cisco disclosed six high-severity vulnerabilities in RoomOS this week as part of a comprehensive internal security review. CVE-2026-20150 (CVSS 8.8) is the most critical in this group, followed by CVE-2026-20156 (CVSS 8.1). The remaining four—CVE-2026-20153, CVE-2026-20157, CVE-2026-20158, and CVE-2026-20187—all carry CVSS scores of 7.5. While Cisco's advisory descriptions were redacted in this dataset, the breadth of findings suggests systemic issues across RoomOS components.
Action: Check your Cisco RoomOS device inventory and monitor Cisco's official security advisories for patch availability and affected product lines. Prioritize devices exposed to untrusted networks.
Fortinet: 12 Vulnerabilities Across Multiple Products
Fortinet leads this week's vulnerability count with 12 issues spanning FortiSandbox, FortiClientEMS, FortiAuthenticator, FortiOS, FortiPAM, FortiSIEM, and FortiSIEMWindowsAgent.
The most critical finding is CVE-2026-59835 (CVSS 8.6), an unauthenticated VNC server exposure in FortiSandbox 4.4.3–4.4.8 and 5.0.0–5.0.2. This allows remote attackers to access the sandbox's VNC interface without authentication—a direct path to sensitive environments.
Other high-severity issues include:
- CVE-2026-59841 (CVSS 7.5): Improper communication channel restriction in FortiSIEMWindowsAgent 7.4.0–7.4.1, enabling privilege escalation
- CVE-2026-59836 (CVSS 7.5): Certificate validation bypass in FortiClientEMS 7.4.0–7.4.5
- CVE-2025-53379 (CVSS 7.5): Out-of-bounds read in FortiAuthenticator 6.5–6.6.2
Medium-severity vulnerabilities include buffer overflows (CVE-2026-59837), cross-site scripting (CVE-2026-23573, CVE-2026-59838), and path traversal (CVE-2026-59839) across FortiOS, FortiPAM, and FortiSIEM.
Action: Fortinet administrators should prioritize FortiSandbox patches immediately due to the unauthenticated VNC exposure. Review affected FortiOS, FortiClientEMS, and FortiAuthenticator versions in your deployment and stage updates according to Fortinet's patch timeline.
DD-WRT: Historic UPnP Buffer Overflow Resurfaces
CVE-2021-27137 (CVSS 8.1) is a notable inclusion despite being an older disclosure. This unsafe strcpy vulnerability in DD-WRT's UPnP handling (before version 45724) allows unauthenticated remote attackers to trigger buffer overflows. While the CVE was published in 2021, its reappearance suggests many devices remain unpatched.
Action: If you manage DD-WRT routers, verify all deployments are running version 45724 or later. Check for any legacy or air-gapped systems that may have been overlooked in previous patch cycles.
ASUS, Netgear, and TP-Link: Predominantly Unrated Issues
ASUS (9 CVEs), Netgear (6 CVEs), and TP-Link (2 CVEs) contributed significant volume but were assigned "none" or unrated severity levels, suggesting they may be in embargo periods or pending formal CVSS assessment.
Notable findings include ASUS CVE-2026-13385 (CVSS 9.5) involving certificate validation issues in certain router models, and Netgear CVE-2026-15757 (CVSS 6.3) affecting the DGND3700v1's local command execution controls. Most TP-Link issues center on weak password hashing and information disclosure.
Action: Monitor vendor security pages for ASUS and Netgear patch announcements. These unrated issues often receive formal CVE scores once advisories are published, which may elevate their priority.
Summary
This week required immediate action on OpenWrt (critical RCE) and Cisco RoomOS (cluster of high-severity issues). Fortinet administrators face a busy patch cycle, particularly for FortiSandbox's unauthenticated VNC exposure. Legacy DD-WRT deployments should be verified against version 45724, and teams should monitor vendor advisories for ASUS and Netgear clarifications on their unrated CVEs.