Authentication Bypass Vulnerability in ASUS Routers
CVE-2026-75753

5.3MEDIUM

Key Information:

Vendor

Asus

Status
Vendor
CVE Published:
20 October 2026

What is CVE-2026-75753?

Certain ASUS routers are susceptible to a vulnerability that allows unauthorized nearby users to exploit missing authentication for critical functions. This weakness enables attackers to send specific HTTP commands that can retrieve sensitive device identification information and alter the router's operational mode. If the router faces abnormal situations, it may fail to initiate self-recovery, potentially jeopardizing the device's functionality. For detailed insights, refer to the ASUS Security Advisory which discusses the necessary firmware updates to mitigate this vulnerability.

Affected Version(s)

Router 3.0.0.4.388 series

References

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.