CVE-2026-88707: High severity ASUS ASUS Router Firmware vulnerability
Published Nov 10, 2026
·Updated
An out-of-bounds write in certain ASUS Router firmware allows an unauthenticated nearby user to send an HTTP request containing parameters that exceed the buffer length, potentially overwriting other memory regions or causing the system to crash. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
Affected Software
1 affected component
ASUS ASUS Router Firmware
Event History
Nov 10, 2026
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
DescriptionWeakness
Data Sourced
via NVD·02:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
An attacker does not need to authenticate, but must be nearby and able to send an HTTP request to the affected router firmware.