ASUS Router Vulnerabilities: Three High-Severity Flaws, Check Your Firmware Now

On October 23, an advisory was published about three high-severity vulnerabilities in ASUS router firmware. The notice from Italy’s national CSIRT covers the 3.0.0.6_102 firmware series and tells users to update according to the vendor’s security bulletin. Possible impacts include authentication bypass, privilege escalation and code execution.

What the vulnerabilities are

The advisory lists CVE-2026-93489, CVE-2026-75779 and CVE-2026-75775. Don’t assume that all three flaws are exploited the same way, or that every router can be attacked directly from the internet.

The vulnerability database entry for CVE-2026-93489 says an unauthenticated attacker on an adjacent network could forge an access ticket. That could let them carry out administrative operations. CVE-2026-75779 combines command injection with request forgery. It relies on the session of an administrator who has been tricked into visiting a malicious website.

These differences in attack conditions matter when you assess the risk. A router with an admin panel reachable only from the local network still needs to be reviewed, and protecting the administrator’s session is part of securing the device.

Who is affected

The advisory covers a range of models that run this firmware family. The series number alone doesn’t tell you whether your device is affected. Check the exact model and firmware release, and use ASUS’s information to pick the right update.

The sources we reviewed don’t confirm that these flaws are being actively exploited. You should still install the patches. A router controls your network connections, so its configuration and admin access need the same care as the rest of your infrastructure.

What to do now

• Find the router’s exact model and the full version number of its installed firmware.
• Read the ASUS security bulletin and the download page for that model, then install the recommended release.
• Allow access to the admin panel only from a trusted network, and turn off remote management from the internet if you don’t need it.
• Log out of the admin panel when you’re done, and don’t open unfamiliar links while you’re signed in as admin.
• After the update, review administrator accounts, DNS settings, port forwarding rules and remote access.

SecurHUB’s take

Router reviews should also include devices in small offices and remote sites. Network security audits help you assess management access, configuration and whether device firmware is up to date.

Sources: CSIRT Toscana — CSIRT-ITA advisory, VulDB — CVE-2026-93489, CVE Brief — CVE-2026-75779