<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>VulnFeed.org: ASUS Router</title><link>https://vulnfeed.org/</link><description>Every disclosure, as it lands. Critical-only feed available.</description><language>en</language><atom:link href="https://vulnfeed.org/feed/product/asus-router.xml" rel="self" type="application/rss+xml"/><item><title>CVE-2026-75775: Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root p</title><link>https://vulnfeed.org/cve/CVE-2026-75775/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-75775/</guid><pubDate>Fri, 23 Oct 2026 07:12:11 +0000</pubDate><description>Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges via crafted parameters sent to the router while the device is in its factory-default state.Refer to the &apos; Security Update for ASUS Router Firmware &apos; section on the ASUS Security Advisory for more information.</description></item><item><title>CVE-2026-93489: Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently </title><link>https://vulnfeed.org/cve/CVE-2026-93489/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-93489/</guid><pubDate>Fri, 23 Oct 2026 07:07:13 +0000</pubDate><description>Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling the user to perform administrator operations. Refer to the &apos; Security Update for ASUS Router Firmware &apos; section on the ASUS Security Advisory for more information.</description></item><item><title>CVE-2026-75779: Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS router mod</title><link>https://vulnfeed.org/cve/CVE-2026-75779/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-75779/</guid><pubDate>Fri, 23 Oct 2026 07:03:41 +0000</pubDate><description>Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS router model allow an attacker to trick a logged-in administrator into visiting a phishing website, causing the router to execute arbitrary commands with root privileges. Refer to the &apos; Security Update for ASUS Router Firmware &apos; section on the ASUS Security Advisory for more information.</description></item></channel></rss>
