Asus releases urgent router firmware to fix critical security flaws

Asus released an urgent firmware patch for three router vulnerabilities that allow attackers to gain administrative access without passwords. The flaws carry CVSS 4.0 scores up to 8.7, and users should update now or apply temporary network restrictions.

Asus released an urgent firmware update for its routers to close three security flaws that grant attackers administrative access without passwords. The vulnerabilities carry CVSS 4.0 severity scores up to 8.7, and the company urges users to install the latest firmware now.

CVE-2026-75775 affects certain Asus router models running firmware from the 3.0.0.6_102 series. An attacker on an adjacent network can gain admin access without authentication under specific conditions. The flaw carries a CVSS 4.0 score of 7.7, classified as High.

CVE-2026-75779 and CVE-2026-93489 also rate High, with scores of 8.6 and 8.7. The first requires user interaction but no prior privileges. An unauthenticated attacker on an adjacent network can exploit the second without user interaction. Asus has not released a complete list of affected models or detailed technical descriptions for these two vulnerabilities.

Asus recommends installing the latest firmware as the primary mitigation. Users can find updates on the company's official support page or the relevant Wi-Fi router product page.

Users who cannot update now should take temporary precautions. Set strong, unique passwords of at least 10 characters for both router administration and Wi-Fi access. Disable remote access from the WAN. Restrict connections to trusted devices. Review router settings, remove unfamiliar linked devices or companion-app sessions, and reboot the router after applying the update.

Source : notebookcheck.net