OS Command Injection and CSRF Vulnerability in ASUS Router Products

CVE-2026-75779

What is CVE-2026-75779?

An identified security flaw in certain ASUS router models allows for improper neutralization of special elements, leading to an OS command injection through Cross-Site Request Forgery (CSRF). An attacker could exploit this vulnerability by tricking a logged-in administrator into visiting a malicious website. This malicious interaction could enable the attacker to execute arbitrary commands on the router with root privileges, potentially compromising the entire network's security. For more information, refer to the Security Update for ASUS Router Firmware provided by ASUS.

References