CVE-2026-75779 | BDVDB-2026-394792 Detail

Description#

Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS router model allow an attacker to trick a logged-in administrator into visiting a phishing website, causing the router to execute arbitrary commands with root privileges. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-10-23Record published in the CVE List.
2. Version 22026-11-02Most recent update recorded in the CVE List.