CVE-2026-84729: High severity vulnerability
Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attacker to write data beyond the intended buffer or potentially cause a denial-of-service (DoS) via a crafted packet. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
Event History
Frequently Asked Questions
Who can exploit this issue?
An unauthenticated attacker who is nearby and able to send a crafted packet to an affected ASUS router firmware instance can attempt exploitation. The attack vector is adjacent, so the attacker is not described as needing Internet-based access.
What impact can exploitation have?
The out-of-bounds write may allow data to be written beyond the intended buffer. It can also potentially cause a denial of service.
Is authentication or user interaction required?
No authentication or user interaction is required according to the provided vector. The attacker must be able to deliver a crafted packet from an adjacent network context.