CVE-2026-88708: Medium severity ASUS ASUS Router Firmware vulnerability
Published Nov 10, 2026
·Updated
An off-by-one error in certain ASUS Router firmware allows an unauthenticated nearby user to send a packet with a specific header length, potentially overwriting memory and causing the affected service to crash. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
Affected Software
1 affected component
ASUS ASUS Router Firmware
Event History
Nov 10, 2026
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
DescriptionWeakness
Data Sourced
via NVD·02:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to attempt exploitation?
The attacker does not need authentication, but must be nearby and able to send a packet to the affected service with a specific header length.