CVE-2026-75753: Missing Auth for Critical HTTP Func in ASUS Routers
CVE-2026-75753 Published on October 20, 2026

Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby user to send specific commands via HTTP requests, causing the router to return device identification information and switch into a specific mode. As a result, when the router encounters abnormal conditions, it may be unable to perform self-recovery. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.

NVD

Vulnerability Analysis

Attack Vector:

ADJACENT

Attack Complexity:

LOW

Privileges Required:

NONE

User Interaction:

NONE

Weakness Type

Missing Authentication for Critical Function

The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Products Associated with CVE-2026-75753

Want to know whenever a new CVE is published for Asus Router? stack.watch will email you.

Asus Router

Affected Versions