p PatchFirst

CVE-2026-17518

CVE-2026-17518

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial of service via an HTTP request with input exceeding the expected length. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.

CVSS 8.2 · High · EPSS 0.1%

Published
Updated

Affected products and versions

  • router

    Versions
    • ASUSWRT 3.0.0.4_386 series: Affected (custom)
    • ASUSWRT 3.0.0.4_388 series: Affected

    No fix published

Original sources

Check your server →