Buffer Overflow Vulnerability in ASUS Routers
CVE-2026-17518

8.2HIGH

Key Information:

Vendor

Asus
Status
Router
Vendor
CVE Published:
20 October 2026

What is CVE-2026-17518?

A vulnerability in certain ASUS router models allows an adjacent authenticated user to exploit a buffer overflow condition. This occurs when an HTTP request exceeds the expected input length, potentially corrupting device operations and resulting in a denial of service. The affected firmware versions require immediate action to mitigate the risks associated with this security loophole. For further details, please refer to the ASUS Security Advisory.

Affected Version(s)

Router ASUSWRT 3.0.0.4_386 series

Router ASUSWRT 3.0.0.4_388 series

References

https://www.asus.com/security-advisory

CVSS V4

Score:
8.2
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.