Improper Command Neutralization in ASUS Router Firmware
CVE-2026-88709

7HIGH

Key Information:

Vendor

Asus
Status
Router Firmware
Vendor
CVE Published:
10 November 2026

What is CVE-2026-88709?

An inadequately secured ASUS Router firmware flaw allows users with physical access to exploit the system. By inserting a USB device that contains a specifically crafted directory name, an attacker might execute arbitrary commands with root privileges, potentially compromising the device's security. For comprehensive details, visit the ASUS Security Advisory.

Affected Version(s)

Router firmware 3.0.0.4.386 series

Router firmware 3.0.0.4.388 series

Router firmware 3.0.0.6.102 series

References

https://www.asus.com/security-advisory

CVSS V4

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.