PT-2026-58872 · Asus · Asus Routers

CVE-2026-13385

·

Published

2026-07-15

·

Updated

2026-07-16

CVSS v4.0

9.5

Critical

VectorAV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Name of the Vulnerable Software and Affected Versions ASUS router models (affected versions not specified)
Description Improper Validation of Integrity Check Value and Improper Certificate Validation allow a remote man-in-the-middle (MITM) user to force the router to download and execute arbitrary commands via a spoofed server. A man-in-the-middle attack occurs when an attacker secretly relays and possibly alters the communications between two parties who believe they are directly communicating with each other.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-13385

Affected Products

Asus Routers