CVE-2026-75753: Medium severity ASUS ASUS Router Firmware vulnerability
Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby user to send specific commands via HTTP requests, causing the router to return device identification information and switch into a specific mode. As a result, when the router encounters abnormal conditions, it may be unable to perform self-recovery. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.
Affected Software
Event History
Frequently Asked Questions
Does exploitation require authentication or an existing router account?
No. The issue allows an unauthorized nearby user to send specific HTTP requests without authentication.
What access does an attacker need to exploit this issue?
The attacker must be nearby and able to send the relevant HTTP requests to the router. No further prerequisites are provided.
Are affected router models or fixed firmware versions identified?
The provided information states that certain ASUS routers are affected, but does not list models or firmware versions. ASUS directs users to its Security Advisory for further information.