CVE-2026-17518
Received Received - Intake

Buffer Overflow in ASUS Router Firmware

Publication date: 2026-10-20

Last updated on: 2026-10-20

Assigner: ASUS

Description
Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial of service via an HTTP request with input exceeding the expected length. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-20
Last Modified
2026-10-20
Generated
2026-10-20
AI Q&A
2026-10-20
EPSS Evaluated
N/A
NVD
CVE-2026-17518
EUVD
EUVD-2026-104783

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
ASUS Router ASUSWRT 3.0.0.4_386 series
ASUS Router ASUSWRT 3.0.0.4_388 series

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a buffer copy operation in certain ASUS router models that does not check the size of input data. An adjacent authenticated user can exploit this by sending an HTTP request with input exceeding the expected length, leading to device operation corruption and a denial of service.

Impact Analysis

If exploited, this vulnerability can cause your ASUS router to malfunction or crash, disrupting network services. It requires an adjacent authenticated user, meaning someone on the same network could potentially trigger it.

Mitigation Strategies

Update ASUS router firmware to the latest version as recommended in the ASUS Security Advisory. Restrict network access to the router's HTTP interface to trusted users only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-17518. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart