CVE-2026-84730: Buffer Overflow
Stack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated nearby attacker to execute arbitrary commands with root privileges via a crafted device name. Refer to the ' Security Update for ASUS Router AiCloud Feature ' section on the ASUS Security Advisory for more information.
Event History
Frequently Asked Questions
Who is exposed to this issue?
ASUS Router devices running affected firmware with the AiCloud feature are exposed to an attacker who is nearby. The attacker does not need to authenticate or interact with a user.
What access does an attacker need to exploit the vulnerability?
The attacker must be in adjacent network range and able to send a crafted device name to the affected router. Successful exploitation can result in arbitrary command execution with root privileges.
Is this remotely exploitable over the internet?
The provided vector identifies adjacent-network attack access, not network or internet-based access. The available information does not establish that exploitation is possible from the public internet.
How can I determine whether my router is affected?
Check the ASUS Security Advisory, specifically the "Security Update for ASUS Router AiCloud Feature" section, for affected firmware information and updates.