ASUS

Vulnerability activity for ASUS: what is being exploited, what was published lately, and when the next patch release is due.

All vendors Open in the dashboard

Last 30 days

CVEs: 4
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 90 days

CVEs: 4
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 365 days

CVEs: 5
Critical (CVSS 9+): 1
Exploited (CISA KEV): 1
With exploit code: 0

Exploited now

CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.

9.3CriticalDec 17, 2025ASUS Live UpdateCVE-2025-59374ASUS Live Update contains an embedded malicious code vulnerability client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Added to KEV Dec 17, 2025Exploited1.2% likely
8.8HighSep 11, 2023ASUS RT-AX55 Routers Code / command injectionCVE-2023-39780ASUS RT-AX55 devices contain an OS command injection vulnerability that could allow a remote, authenticated attacker to execute arbitrary commands. As represented by CVE-2023-41346.Added to KEV Jun 2, 2025 · 630 days after publicationExploited40% likelyDetection
9.8CriticalMay 6, 2021ASUS Routers Auth bypass / access controlCVE-2021-32030ASUS Lyra Mini and ASUS GT-AC2900 devices contain an improper authentication vulnerability that allows an attacker to gain unauthorized access to the administrative interface. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Added to KEV Jun 2, 2025 · 1,487 days after publicationExploited99% likelyExploit codeNucleiDetection

Recent

6.8MediumOct 27, 2026ASUS motherboards firmware Memory corruptionCVE-2026-88781Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing a system crash. Refer to the 'Security Update for Multiple ASUS Motherboards' section on the ASUS Security Advisory for more information.
8.7HighOct 23, 2026ASUS Router Auth bypass / access controlCVE-2026-93489Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling the user to perform administrator operations. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
8.6HighOct 23, 2026ASUS Router Code / command injectionCVE-2026-75779Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS router model allow an attacker to trick a logged-in administrator into visiting a phishing website, causing the router to execute arbitrary commands with root privileges. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.1% likely
7.7HighOct 23, 2026ASUS Router Code / command injectionCVE-2026-75775Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges via crafted parameters sent to the router while the device is in its factory-default state.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
9.3CriticalDec 17, 2025ASUS Live UpdateCVE-2025-59374ASUS Live Update contains an embedded malicious code vulnerability client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Exploited1.2% likely
9.8CriticalMay 6, 2021ASUS Routers Auth bypass / access controlCVE-2021-32030ASUS Lyra Mini and ASUS GT-AC2900 devices contain an improper authentication vulnerability that allows an attacker to gain unauthorized access to the administrative interface. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Exploited99% likelyExploit codeNucleiDetection
8.8HighSep 11, 2023ASUS RT-AX55 Routers Code / command injectionCVE-2023-39780ASUS RT-AX55 devices contain an OS command injection vulnerability that could allow a remote, authenticated attacker to execute arbitrary commands. As represented by CVE-2023-41346.Exploited40% likelyDetection

See every ASUS entry on the dashboard.