Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2026-14157

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ASUS

Description

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ASUS Router

Default version status: unaffected

  • 3.0.0.6_102 seriesaffected

References