ASUS
Number 89 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Combines these spellings from source records: ASUS, Asus, asus
Total vulnerabilities
208
Critical
23
High
96
Known Exploited
3
Exploit available
0
Network, no login needed
18.0%
Of 205 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 62 | 5 | 32 | 23 | 2 | 0 |
| 2025 | 31 | 5 | 14 | 12 | 0 | 0 |
| 2024 | 29 | 6 | 14 | 9 | 0 | 0 |
| 2023 | 25 | 2 | 22 | 0 | 0 | 1 |
| 2022 | 18 | 2 | 11 | 5 | 0 | 0 |
| 2021 | 38 | 1 | 2 | 34 | 1 | 0 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2019 | 3 | 2 | 1 | 0 | 0 | 0 |
| 2018 | 2 | 0 | 0 | 0 | 0 | 2 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| Router | 25 | 19 |
| Armoury Crate | 24 | 10 |
| BMC firmware for Z10PR-D16 | 18 | 2 |
| BMC firmware for ASMB9-iKVM | 17 | 0 |
| RT-AC86U | 10 | 9 |
| RT-AX55 | 9 | 8 |
| RT-AX56U | 6 | 5 |
| RT-AX88U | 6 | 5 |
| Router firmware | 6 | 5 |
| Download Master | 5 | 3 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Memory Corruption | 48 | 11 |
| Command Injection | 29 | 27 |
| Authentication Issues | 11 | 10 |
| Exposed IOCTL with Insufficient Access Control | 11 | 7 |
| Path Traversal | 10 | 3 |
| Stack-based Buffer Overflow | 9 | 7 |
| Format String | 8 | 8 |
| Cross-Site Scripting | 7 | 2 |
| SQL Injection | 5 | 2 |
| Incorrect Permission Assignment for Critical Resource | 4 | 3 |
Known to be attacked
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2025-59374 | ASUS live update: Embedded Malicious Code | Critical | 1.2% | |
| CVE-2023-39780 | ASUS RT-AX55: Command Injection | High | 39.5% | |
| CVE-2021-32030 | ASUS Routers Improper Authentication Vulnerability | Critical | 99.4% |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-88710 | ASUS Router firmware: Command Injection | High | 1.2% | |
| CVE-2026-88709 | ASUS Router firmware: Command Injection | High | 0.4% | |
| CVE-2026-88708 | ASUS Router firmware vulnerability | Medium | 0.2% | |
| CVE-2026-88707 | ASUS Router firmware: Memory Corruption | High | 0.2% | |
| CVE-2026-84730 | ASUS Router firmware vulnerability | High | 0.3% | |
| CVE-2026-84729 | ASUS Router firmware: Memory Corruption | High | 0.2% | |
| CVE-2026-112116 | ASUS System Control Interface vulnerability | High | 0.1% | |
| CVE-2026-110464 | ASUS Armoury Crate: Missing Authorization | Medium | 0.1% | |
| CVE-2026-88781 | ASUS motherboards firmware vulnerability | Medium | 0.1% | |
| CVE-2026-93489 | ASUS Router: Authentication Issues | High | 0.2% |