Off-by-One Error in ASUS Router Firmware Exposes Security Risk
CVE-2026-88708

5.3MEDIUM

Key Information:

Vendor

Asus
Status
Router Firmware
Vendor
CVE Published:
10 November 2026

What is CVE-2026-88708?

An off-by-one error in certain ASUS Router firmware versions allows unauthenticated users within close proximity to exploit the vulnerability by sending specially crafted packets. This can potentially lead to memory overwrites, which may crash the affected service and disrupt router functionality. For further details, refer to the Security Update for ASUS Router Firmware section on the ASUS Security Advisory.

Affected Version(s)

Router firmware 3.0.0.4.386 series

Router firmware 3.0.0.4.388 series

Router firmware 3.0.0.6.102 series

References

https://www.asus.com/security-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.