Index
Search
Search the public record. Drafts and scheduled notes are not included.
news
ASUS router firmware security update covers four CVEs
ASUS published four router firmware CVEs on 7 October 2026: CVE-2026-14911 XSS (CVSS 4.0 9.3), CVE-2026-19386 authenticated adjacent config-upload RCE (9.3), CVE-2026-16528 DDNS log disclosure (8.4), and CVE-2026-19396 IFTTT PRNG token (7.7). Update firmware. Not in CISA KEV. No public PoC confirmed.
Published 3h ago
CVE-2026-14911
ASUS router XSS via crafted URL against authenticated session
XSS
Published 5h ago
CVE-2026-16528
ASUS router DDNS credentials exposed in system log
Info disclosure
Published 6h ago
CVE-2026-19386
ASUS router stack overflow via crafted config upload
RCE
Published 6h ago
CVE-2026-19396
ASUS RT-BE57 IFTTT pairing token from predictable PRNG seed
Auth bypass
Published 6h ago