CVE-2026-75779 — Vulnerability intelligence
ASUS — Router
Published:
- CVSS
- 8.6
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
Improper Neutralization of Special
Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request
Forgery (CSRF) in an ASUS router model allow an attacker to trick a logged-in
administrator into visiting a phishing website, causing the router to execute
arbitrary commands with root privileges.
Refer to the '
Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.