PT-2026-121782
CVE-2026-75779
·
Published
2026-10-23
·
Updated
2026-10-30
Description by
CVSS 4.0
8.6
HighMetricsAV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
ASUS router (affected versions not specified)
Description
An issue involving Cross-Site Request Forgery (CSRF) and OS Command Injection occurs when special elements used in an OS command are not properly neutralized. This allows an attacker to trick a logged-in administrator into visiting a phishing website, which leads to the execution of arbitrary commands with root privileges on the router.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾