{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: ASUS vulnerabilities","home_page_url":"https://patchfirst.co/vendor/asus/","feed_url":"https://patchfirst.co/feed/vendor/asus.json","description":"New and newly exploited ASUS CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-14911","url":"https://patchfirst.co/cve/CVE-2026-14911/","title":"CVE-2026-14911: Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS router modules allows a…","content_text":"ASUS · Router. Not in CISA KEV. EPSS 0.3% (higher than 24.9% of CVEs). CVSS 9.3 CRITICAL. Priority 13.7 of 100.","summary":"Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS router modules allows a…","date_published":"2026-10-07T00:00:00.000Z","date_modified":"2026-10-07T19:17:35.000Z","tags":[],"_patchfirst":{"reason":"published","priority":13.7,"kev":null,"epss":{"score":0.00319,"percentile":0.24895},"cvss":{"score":9.3,"severity":"CRITICAL","version":"4.0"},"vendor":"ASUS","product":"Router","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-19386","url":"https://patchfirst.co/cve/CVE-2026-19386/","title":"CVE-2026-19386: A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code…","content_text":"ASUS · Router. Not in CISA KEV. EPSS 0.2% (higher than 8.9% of CVEs). CVSS 9.3 CRITICAL. Priority 10.5 of 100.","summary":"A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code…","date_published":"2026-10-07T00:00:00.000Z","date_modified":"2026-10-08T04:17:19.000Z","tags":[],"_patchfirst":{"reason":"published","priority":10.5,"kev":null,"epss":{"score":0.00192,"percentile":0.08921},"cvss":{"score":9.3,"severity":"CRITICAL","version":"4.0"},"vendor":"ASUS","product":"Router","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-14157","url":"https://patchfirst.co/cve/CVE-2026-14157/","title":"CVE-2026-14157: Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute…","content_text":"ASUS · Router. Not in CISA KEV. EPSS 0.8% (higher than 55.3% of CVEs). CVSS 9.4 CRITICAL. Priority 19.0 of 100.","summary":"Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute…","date_published":"2026-10-01T00:00:00.000Z","date_modified":"2026-10-02T04:18:06.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19,"kev":null,"epss":{"score":0.00763,"percentile":0.55338},"cvss":{"score":9.4,"severity":"CRITICAL","version":"4.0"},"vendor":"ASUS","product":"Router","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-59374#kev","url":"https://patchfirst.co/cve/CVE-2025-59374/","title":"[KEV] CVE-2025-59374: ASUS Live Update Embedded Malicious Code Vulnerability","content_text":"ASUS · Live Update. In CISA KEV since 2025-12-17. ENISA EUVD lists it as exploited. EPSS 1.2% (higher than 68.1% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1195.002 Compromise Software Supply Chain; T1059 Command and Scripting Interpreter. Priority 63.5 of 100.","summary":"ASUS Live Update Embedded Malicious Code Vulnerability","date_published":"2025-12-17T00:00:00.000Z","date_modified":"2026-09-25T23:10:00.000Z","tags":["kev","T1195.002","T1059"],"_patchfirst":{"reason":"kev","priority":63.5,"kev":{"dateAdded":"2025-12-17","ransomware":false},"epss":{"score":0.01197,"percentile":0.68074},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"ASUS","product":"Live Update","techniqueIds":["T1195.002","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-32030#kev","url":"https://patchfirst.co/cve/CVE-2021-32030/","title":"[KEV] CVE-2021-32030: ASUS Routers Improper Authentication Vulnerability","content_text":"ASUS · Routers. In CISA KEV since 2025-06-02. ENISA EUVD lists it as exploited. EPSS 99.4% (higher than 99.94% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1040 Network Sniffing; T1098 Account Manipulation. Priority 69.8 of 100.","summary":"ASUS Routers Improper Authentication Vulnerability","date_published":"2025-06-02T00:00:00.000Z","date_modified":"2026-06-17T03:52:42.000Z","tags":["kev","public-exploit","T1068","T1040","T1098"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2025-06-02","ransomware":false},"epss":{"score":0.99393,"percentile":0.9994},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"ASUS","product":"Routers","techniqueIds":["T1068","T1040","T1098"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-39780#kev","url":"https://patchfirst.co/cve/CVE-2023-39780/","title":"[KEV] CVE-2023-39780: ASUS RT-AX55 Routers OS Command Injection Vulnerability","content_text":"ASUS · RT-AX55 Routers. In CISA KEV since 2025-06-02. ENISA EUVD lists it as exploited. EPSS 39.5% (higher than 98.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1133 External Remote Services; T1588 Obtain Capabilities; T1059.004 Unix Shell; T1021.004 SSH. Priority 68.9 of 100.","summary":"ASUS RT-AX55 Routers OS Command Injection Vulnerability","date_published":"2025-06-02T00:00:00.000Z","date_modified":"2026-06-17T06:12:51.000Z","tags":["kev","public-exploit","T1078","T1133","T1588","T1059.004","T1021.004"],"_patchfirst":{"reason":"kev","priority":68.9,"kev":{"dateAdded":"2025-06-02","ransomware":false},"epss":{"score":0.39514,"percentile":0.98611},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"ASUS","product":"RT-AX55 Routers","techniqueIds":["T1078","T1133","T1588","T1059.004","T1021.004"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-2492","url":"https://patchfirst.co/cve/CVE-2025-2492/","title":"CVE-2025-2492: An improper authentication control vulnerability exists in AiCloud","content_text":"ASUS · Router. Not in CISA KEV. EPSS 1.1% (higher than 66.4% of CVEs). CVSS 9.2 CRITICAL. Public exploit code exists. Priority 66.9 of 100.","summary":"An improper authentication control vulnerability exists in AiCloud","date_published":"2025-04-18T00:00:00.000Z","date_modified":"2026-02-24T00:18:59.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":66.9,"kev":null,"epss":{"score":0.01131,"percentile":0.66391},"cvss":{"score":9.2,"severity":"CRITICAL","version":"4.0"},"vendor":"ASUS","product":"Router","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-12912","url":"https://patchfirst.co/cve/CVE-2024-12912/","title":"CVE-2024-12912: An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution","content_text":"ASUS · Router. Not in CISA KEV. EPSS 1.2% (higher than 69.1% of CVEs). CVSS 7.2 HIGH. Public exploit code exists. Priority 65.5 of 100.","summary":"An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution","date_published":"2025-01-02T00:00:00.000Z","date_modified":"2025-01-06T20:33:30.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":65.5,"kev":null,"epss":{"score":0.0124,"percentile":0.69128},"cvss":{"score":7.2,"severity":"HIGH","version":"3.1"},"vendor":"ASUS","product":"Router","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-3080","url":"https://patchfirst.co/cve/CVE-2024-3080/","title":"CVE-2024-3080: ASUS Router - Improper Authentication","content_text":"ASUS · ZenWiFi XT8. Not in CISA KEV. EPSS 43.5% (higher than 98.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 67.7 of 100.","summary":"ASUS Router - Improper Authentication","date_published":"2024-06-14T00:00:00.000Z","date_modified":"2024-08-01T19:32:42.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":67.7,"kev":null,"epss":{"score":0.43456,"percentile":0.98736},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"ASUS","product":"ZenWiFi XT8","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-41348","url":"https://patchfirst.co/cve/CVE-2023-41348/","title":"CVE-2023-41348: ASUS RT-AX55 - command injection - 4","content_text":"ASUS · RT-AX55. Not in CISA KEV. EPSS 1.3% (higher than 70.2% of CVEs). CVSS 8.8 HIGH. Priority 61.8 of 100.","summary":"ASUS RT-AX55 - command injection - 4","date_published":"2023-11-03T00:00:00.000Z","date_modified":"2024-09-06T18:34:47.000Z","tags":[],"_patchfirst":{"reason":"published","priority":61.8,"kev":null,"epss":{"score":0.01288,"percentile":0.70158},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"ASUS","product":"RT-AX55","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-41347","url":"https://patchfirst.co/cve/CVE-2023-41347/","title":"CVE-2023-41347: ASUS RT-AX55 - command injection - 3","content_text":"ASUS · RT-AX55. Not in CISA KEV. EPSS 1.3% (higher than 70.2% of CVEs). CVSS 8.8 HIGH. Priority 61.8 of 100.","summary":"ASUS RT-AX55 - command injection - 3","date_published":"2023-11-03T00:00:00.000Z","date_modified":"2024-09-04T20:21:02.000Z","tags":[],"_patchfirst":{"reason":"published","priority":61.8,"kev":null,"epss":{"score":0.01288,"percentile":0.70157},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"ASUS","product":"RT-AX55","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-41345","url":"https://patchfirst.co/cve/CVE-2023-41345/","title":"CVE-2023-41345: ASUS RT-AX55 - command injection - 1","content_text":"ASUS · RT-AX55. Not in CISA KEV. EPSS 1.3% (higher than 70.2% of CVEs). CVSS 8.8 HIGH. Priority 61.8 of 100.","summary":"ASUS RT-AX55 - command injection - 1","date_published":"2023-11-03T00:00:00.000Z","date_modified":"2024-09-06T18:37:02.000Z","tags":[],"_patchfirst":{"reason":"published","priority":61.8,"kev":null,"epss":{"score":0.01288,"percentile":0.70157},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"ASUS","product":"RT-AX55","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-41346","url":"https://patchfirst.co/cve/CVE-2023-41346/","title":"CVE-2023-41346: ASUS RT-AX55 - command injection - 2","content_text":"ASUS · RT-AX55. Not in CISA KEV. EPSS 1.2% (higher than 68.2% of CVEs). CVSS 8.8 HIGH. Priority 61.4 of 100.","summary":"ASUS RT-AX55 - command injection - 2","date_published":"2023-11-03T00:00:00.000Z","date_modified":"2024-09-06T18:35:57.000Z","tags":[],"_patchfirst":{"reason":"published","priority":61.4,"kev":null,"epss":{"score":0.01202,"percentile":0.68193},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"ASUS","product":"RT-AX55","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2021-28199","url":"https://patchfirst.co/cve/CVE-2021-28199/","title":"CVE-2021-28199: ASUS BMC's firmware: buffer overflow - Modify user’s information function","content_text":"ASUS · BMC firmware for ASMB9-iKVM. Not in CISA KEV. EPSS 1.9% (higher than 79.4% of CVEs). CVSS 4.9 MEDIUM. Priority 59.3 of 100.","summary":"ASUS BMC's firmware: buffer overflow - Modify user’s information function","date_published":"2021-04-06T00:00:00.000Z","date_modified":"2024-09-16T16:48:36.000Z","tags":[],"_patchfirst":{"reason":"published","priority":59.3,"kev":null,"epss":{"score":0.01874,"percentile":0.79361},"cvss":{"score":4.9,"severity":"MEDIUM","version":"3.1"},"vendor":"ASUS","product":"BMC firmware for ASMB9-iKVM","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}