CVE-2026-13313: High severity ASUS ASUS Router Firmware vulnerability
An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security mechanisms and enable the Telnet service, thereby executing arbitrary commands with root privileges and potentially affecting other devices connected to the router. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The attacker must be remotely authenticated to the affected router and able to send a crafted HTTP request. No user interaction is required.
What is the impact if exploitation succeeds?
An attacker can bypass security mechanisms, enable the Telnet service, and execute arbitrary commands with root privileges. Other devices connected to the router may also be affected.
Which router models and firmware versions are affected?
The available information states that certain ASUS router models are affected, but does not identify specific models or firmware versions. Consult the ASUS Security Advisory's Security Update for ASUS Router Firmware section for affected-product details.