CVE-2026-75779
HIGH—CVSS v3
—CVSS v2
—
EPSS (exploit probability)
CWE-78CWE
Description
Improper Neutralization of Special
Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request
Forgery (CSRF) in an ASUS router model allow an attacker to trick a logged-in
administrator into visiting a phishing website, causing the router to execute
arbitrary commands with root privileges.
Refer to the '
Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
Affected routers (0)
No routers currently mapped to this CVE in our database.