Asus rushes out router firmware update to fix critical vulnerabilities

Asus has released an urgent firmware update for its routers to address three security vulnerabilities that could let attackers gain administrative access without a password. The flaws have CVSS 4.0 severity scores up to 8.7 out of 10, and the company is urging users to install the latest firmware as soon as possible.

One of the vulnerabilities, CVE-2026-75775, affects certain Asus router models running firmware from the 3.0.0.6_102 series. It could allow an attacker on an adjacent network to gain admin access without authentication under specific conditions. The flaw has a CVSS 4.0 score of 7.7, classified as High severity.

Two other flaws, CVE-2026-75779 and CVE-2026-93489, also carry High severity ratings, with scores of 8.6 and 8.7, respectively. According to Asus, the first requires user interaction but no prior privileges, while the second can be exploited by an unauthenticated attacker on an adjacent network without user interaction. The company has not provided a complete list of affected models or detailed technical descriptions of these two flaws.

Asus recommends installing the latest firmware as the primary mitigation. Users can find the updates on the company’s official support page or the relevant Wi-Fi router product page.

For users who cannot update immediately, Asus recommends several temporary precautions. These include setting strong, unique passwords of at least 10 characters for both router administration and Wi-Fi, disabling remote access from the WAN, and allowing only trusted devices to connect to the network.

The company also advises users to review their router settings, remove unfamiliar linked devices or companion-app sessions, and reboot the router after installing the update.