ASUS Router Security Update: Fixes Already Available for Impacted Devices ASUS has just published a security advisory covering vulnerabilities affecting some of its router firmware platforms. The issues could potentially allow attackers to carry out unauthorised actions on affected devices...

[UK Sentinel]

ASUS has just published a security advisory covering vulnerabilities affecting some of its router firmware platforms. The issues could potentially allow attackers to carry out unauthorised actions on affected devices under certain attack conditions.

The good news is that ASUS appears to have already applied the necessary security fixes to most, if not all, affected supported routers through previous firmware releases. In some cases, the security improvements were included in firmware updates before ASUS publicly disclosed the details of the vulnerabilities.

This follows a security process known as Coordinated Vulnerability Disclosure (CVD), a widely used industry practice where manufacturers work to resolve security issues and release fixes before publicly sharing detailed information about the vulnerability. This approach helps give users time to update their devices while reducing the opportunity for attackers to exploit the issue before protections are available.

The flaw, tracked as CVE-2026-13385, impacts multiple ASUS router firmware branches, including the widely deployed 3.0.0.4_386, 3.0.0.4_388, and 3.0.0.6_102 series.

Owners of ASUS routers should still check that their device is running the latest available firmware version, as firmware availability can vary depending on the router model and region. Keeping router firmware updated remains one of the best ways to protect a home network and connected devices.

ASUS Patches Critical Router Vulnerability Enabling Remote Command Execution

In a completely sane world, madness is the only freedom (J.G.Ballard).

You need to login in order to vote

[Superhands]

Is there a list of affected devices and firmware? BT10 hasn’t had a meaningful update for a good while

You need to login in order to vote

[UK Sentinel]

Alas ASUS does not publish effected an effective devices list as such as they (ASUS) tend to fix issues before they are then released to the public domain.

Does seem as though ‘ASUS ZenWiFi BT10 Firmware version 3.0.0.6.102_39110’ addresses this CVE-2026-13385.

 

https://www.asus.com/security-advisory/

https://nvd.nist.gov/vuln/detail/CVE-2026-13385

In a completely sane world, madness is the only freedom (J.G.Ballard).

You need to login in order to vote

[Author]

Posts