ASUS Addresses Critical Router Vulnerability Allowing Remote Command Execution

ASUS has issued critical security updates for a high-severity vulnerability in its router firmware, tracked as CVE-2026-13385, published on 2026-07-15. This flaw affects multiple firmware branches, including versions 3.0.0.4_386, 3.0.0.4_388, and 3.0.0.6_102. Attackers could exploit this vulnerability to execute arbitrary commands remotely, potentially through man-in-the-middle (MITM) attacks. The vulnerability poses significant risks to both enterprise and network security. ASUS has recommended that users update their firmware immediately to mitigate the threat. The issue is particularly concerning given the widespread use of the affected firmware versions. Security professionals are advised to monitor their networks for any signs of exploitation. The current status is that patches are available, and users are urged to apply them promptly.

Key Points: • CVE-2026-13385 allows remote command execution on affected ASUS routers. • Multiple firmware versions are impacted, including widely used series. • ASUS has released patches and recommends immediate updates for users.