Affected Vendors This Week
- ASUS: 3 CVEs (1 critical, 2 high)
- Cisco: 1 CVE (critical)
- Fortinet: 1 CVE (critical)
- TP-Link: 1 CVE (high)
This week brought six new router and network appliance vulnerabilities, with three rated critical. The most severe issues involve authentication bypass and remote code execution threats affecting enterprise and consumer-grade equipment alike.
Critical Vulnerabilities
Cisco Catalyst SD-WAN Manager (CVE-2026-76504, CVSS 9.8) poses an immediate threat to enterprises. An unauthenticated remote attacker can bypass API session-based authentication and gain privileged access to affected systems. This is a zero-authentication attack surface — no credentials needed. If you manage Catalyst SD-WAN deployments, prioritize patching immediately and review access logs for suspicious activity.
Fortinet FortiMail (CVE-2026-104286, CVSS 9.8) contains a path traversal vulnerability affecting versions 8.0.0–8.0.1 and 7.4.0–7.6.6. Attackers can bypass directory restrictions to access sensitive files. FortiMail administrators should update to patched releases without delay.
ASUS Router Format String (CVE-2026-14157, CVSS 9.4) allows authenticated users to execute arbitrary commands by uploading a crafted file through the web interface. While authentication is required, the impact — full remote code execution — makes this critical for any organization running ASUS enterprise or prosumer routers.
High-Severity Issues
ASUS Active Debug Code (CVE-2026-13313, CVSS 8.9) enables remote authenticated users to bypass security controls and enable Telnet remotely, creating a backdoor for further compromise.
TP-Link TL-WR841N (CVE-2026-102294, CVSS 8.5) suffers from OS command injection in IPv6 WAN configuration. A malformed IPv6 Gateway value is directly incorporated into system commands, allowing authenticated attackers to execute arbitrary code.
ASUS Motherboard (CVE-2026-93495, CVSS 7.0) involves physical proximity, making it lower-priority for most remote-access scenarios, but relevant for facilities with physical security concerns.
Recommended Actions
- Check vendor advisories immediately for Cisco, Fortinet, and ASUS patches
- Prioritize Cisco and Fortinet updates (zero-auth and high-impact)
- Audit access logs for SD-WAN Manager and FortiMail instances
- Restrict web interface access to trusted IPs where possible
- Test patches in non-production environments before broad deployment