CVE-2026-17518: High severity ASUS ASUS Router Firmware vulnerability
Published Oct 20, 2026
·Updated
Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial of service via an HTTP request with input exceeding the expected length. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.
Affected Software
1 affected component
ASUS ASUS Router Firmware
Event History
Oct 20, 2026
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
DescriptionWeakness
Data Sourced
via NVD·02:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What conditions are required to exploit this issue?
An attacker must be adjacent to the device and authenticated. Exploitation involves sending an HTTP request containing input longer than the expected length.