CVE-2026-16528: High severity ASUS Router Firmware vulnerability
Published Oct 7, 2026
·Updated
Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker to obtain DDNS credentials from the system log, potentially enabling modification of DNS settings.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
Affected Software
1 affected component
ASUS Router Firmware
Event History
Oct 7, 2026
CVE Published
via MITRE·02:02 AM
Data Sourced
via MITRE·02:02 AM
DescriptionWeakness
Data Sourced
via NVD·02:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need?
An attacker must be remote and authenticated to exploit the issue.
2
What could an attacker do with the exposed information?
The attacker could obtain DDNS credentials from the system log, which could potentially enable modification of DNS settings.