Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Asus has released firmware updates to address two critical vulnerabilities in its routers, CVE-2026-14157 and CVE-2026-13313, both published on October 1, 2026. The first vulnerability allows arbitrary command execution via malicious VPN configuration files, rated critical with a CVSS score of 9.4....
Asus has identified a critical authentication bypass vulnerability (CVE-2025-59367) affecting its DSL-AC51, DSL-AC750, and DSL-N16 router models. This flaw allows remote, unauthenticated attackers to gain full control of unpatched devices exposed online. A firmware update has been released to addres...
ASUS has reported critical authentication bypass vulnerabilities affecting its AiCloud and DSL series routers. The vulnerabilities, tracked as CVE-2025-59366 and CVE-2025-59367, allow unauthenticated remote attackers to gain control over affected devices. Users are urged to update their firmware to...
Thousands of ASUS routers have been compromised in a hijacking campaign linked to China, identified as Operation 'WrtHug.' The primary impact is on users in Taiwan, but networks in the United States, Russia, Southeast Asia, and several European countries are also affected. The operation targets vari...
