{"status":200,"message":"OK","result":{"data":[{"id":3127,"title":"Security Update for ASUS Router Firmware","type":"Security Bulletin","affectedProducts":"
3.0.0.6_102 series
","cve":"
CVE-2026-75775
\n
CVE-2026-75779
\n
CVE-2026-93489
","popUpContent":"
[Security Bulletin]
\n
ASUS has released a security update for ASUS router firmware to address a reported vulnerabilities and strongly recommends updating to the latest firmware version to ensure optimal protection.
An improper authentication vulnerability exists in certain ASUS router models. Under specific conditions, an unauthenticated attacker on an adjacent network may gain administrative access to the router.
To protect your devices, ASUS strongly recommends that all users update their router firmware to the latest version immediately.
You can find the latest firmware on the ASUS support page at Official Support | ASUS Global or the relevant product page at ASUS WiFi Routers｜WiFi Routers｜ASUS Global
\n
 
\n
Mitigation
\n
ASUS recommends applying the latest firmware update as the primary mitigation.
\n
If you cannot update immediately, ASUS recommends the following actions to reduce risk:
\n
\n
1.Use strong, unique passwords for your router administration page and WiFi network (at least 10 characters, with a mix of uppercase letters, numbers, and symbols).
\n
2.Keep the router web management interface accessible only from trusted local networks, and disable remote access from WAN.
\n
3.Avoid allowing untrusted devices to join your local or wireless network.
\n
4.Review and remove unrecognized linked devices or companion-app sessions from your router settings, and reboot the router after updating the firmware.
\n
 
\n
\n
\n
CVE-2026-75775
CVSS 4.0 Score：7.7 / High
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
\n
 
\n
CVE-2026-75779
CVSS 4.0 Score：8.6 / High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
\n
 
\n
CVE-2026-93489
CVSS 4.0 Score：8.7 / High
\n
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
\n
\n
 
","publishedDate":"1792734723143","updateDate":"1792742700000"},{"id":3121,"title":"Security Update for ASUS Router Firmware","type":"Security Bulletin","affectedProducts":"
3.0.0.4_386 series
\n
3.0.0.4_388 series
","cve":"
CVE-2026-17518
\n
CVE-2026-75753
","popUpContent":"
[Security Bulletin]
ASUS has released a security update for ASUS router firmware to address two reported vulnerabilities and strongly recommends updating to the latest firmware version to ensure optimal protection.
This update addresses two security vulnerabilities in certain ASUS router models. If exploited, the issues could allow an adjacent attacker to cause a denial of service on the device, or to obtain limited device information and alter the device's operating state.
ASUS strongly recommends that all users update their router firmware to the latest version immediately. The latest firmware can be found on the ASUS Support page at https://www.asus.com/support/ or the relevant product page at https://www.asus.com/Networking/..
\n
 
\n
\n
Mitigation
ASUS recommends applying the latest firmware update as the primary mitigation.
If you cannot update immediately, ASUS recommends the following actions to reduce risk:
1.Use strong, unique passwords for your router administration page and WiFi network (at least 10 characters, with a mix of uppercase letters, numbers, and symbols) to prevent unauthorized administrative access.
2.Restrict access to your local and wireless networks to trusted devices only, and enable the guest network or client isolation for visitor devices so that they cannot reach router management services.
3.Keep the router web management interface accessible only from trusted local networks, and disable remote access from WAN.
4.Disable the FTP server under AiDisk / USB Application if it is not required.
\n
 
\n
EOL Guidance
For End-of-Life (EOL) models unsupported by new firmware, ASUS recommends replacing the device with a supported model. If continued use is unavoidable, ensure that both your router login and WiFi passwords are strong and unique, keep the web management interface accessible only from trusted local networks, and disable any services accessible from the internet, including AiCloud, remote access from WAN, port forwarding, DDNS, VPN server, DMZ, port triggering, and FTP.
Please refer to the ASUS EOL product list at https://www.asus.com/event/network/eol-product/.
\n
 
\n
CVE-2026-17518
\n
CVSS 4.0 Score：8.2 / High
\n
AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:H
\n
 
\n
CVE-2026-75753
\n
CVSS 4.0 Score：5.3 / Medium
\n
AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
\n
 
\n
 
\n
","publishedDate":"1792475052183","updateDate":"1792461780000"},{"id":3117,"title":"Security Update for Armoury Crate App","type":"Security Bulletin","affectedProducts":"
Armoury Crate from V3.0.0. through V6.5.10、Armoury Crate SE from V2.1.17 through V2.2.17
","cve":"
CVE-2026-102438
","popUpContent":"
[Security Bulletin]
\n
\n
ASUS has released a Software Update for Armoury Crate (including Armoury Crate SE),
\n
a system management software.   This update includes important security updates, and ASUS
\n
strongly recommends that users update their Armoury Crate installation to the latest version.   
\n
The latest Software Update can be received by opening Armoury Crate,
\n
navigating to the “Settings” > “Update Center” tab, and clicking “Check for Updates”.
\n
Click “Update” if a new version is available.
\n 
\n
\n
\n
CVE-2026-102438
\n
CVSS 4.0 Score：8.5 / high
\n
AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
\n
\n
","publishedDate":"1792461261290","updateDate":"1792461720000"},{"id":3120,"title":"Security Update for ASUS Router Firmware","type":"Security Bulletin","affectedProducts":"
3.0.0.4_386 series
3.0.0.4_388 series
3.0.0.6_102 series
","cve":"
CVE-2026-14911
CVE-2026-16528
CVE-2026-19386
CVE-2026-19396
","popUpContent":"
[Security Bulletin]
ASUS has released a security update for ASUS router firmware to address four reported vulnerabilities and strongly recommends updating to the latest firmware version to ensure optimal protection.
This update addresses four security vulnerabilities in certain router firmware. If exploited, the issues could allow a remote attacker to execute malicious script content via a crafted link, misuse an administrator-initiated pairing token to read or modify router settings, obtain sensitive information from the device, or execute arbitrary code by uploading a crafted configuration file.
ASUS strongly recommends that all users update their router firmware to the latest version immediately.
The latest firmware can be found on the ASUS Support page at https://www.asus.com/support/ or the relevant product page at https://www.asus.com/Networking/.

\n
Mitigation
\n
Before applying the firmware update, users can reduce their exposure by taking the following actions:
\n
\n
1. Avoid clicking untrusted links that reference the router management interface.
\n
2. Avoid performing IFTTT pairing while untrusted devices are connected to your local or wireless network.
\n
3. Keep the router web management interface accessible only from trusted local networks, and disable remote access from WAN.
\n
4. Reboot the router after the firmware update to clear any previously issued pairing tokens.
\n
5. Avoid sharing router diagnostic information or logs with untrusted parties.
\n
6. Use strong, unique passwords for your router administration page and WiFi network (at least 10 characters, with a mix of uppercase letters, numbers, and symbols) to prevent unauthorized administrative access.
\n
7. Do not restore configuration backup files obtained from untrusted sources.
\n
\n
 
\n
EOL Guidance
For End-of-Life (EOL) models that are no longer supported with new firmware, follow the mitigation steps above and consider replacing the device with a currently supported model.

\n

CVE-2026-14911
CVSS 4.0 Score：9.3 / Critical
AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:H

\n

CVE-2026-16528
CVSS 4.0 Score：8.4 / High
AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

\n

CVE-2026-19386
CVSS 4.0 Score：9.3 / Critical
AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

\n

CVE-2026-19396
CVSS 4.0 Score：7.7 / High
AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

\n
","publishedDate":"1791355380803","updateDate":"1791352260000"},{"id":3116,"title":"Security Update for Multiple ASUS Motherboards","type":"Security Bulletin","affectedProducts":"
Refer to the Security Update for Multiple ASUS Motherboards
","cve":"
CVE-2026-93495
","popUpContent":"

[Security Bulletin]
ASUS has released a BIOS update for the affected motherboard models listed below and strongly recommends 
updating to the latest version to ensure optimal protection.
This update addresses a security vulnerability related to improper initialization in certain ASUS motherboards.
If exploited, the issue could allow a physically proximate attacker to read or write arbitrary system memory by
inserting a specially crafted device.
ASUS strongly recommends that users update their motherboard BIOS to the fixed version listed below 
immediately. The latest BIOS update can be downloaded from the ASUS Support site.

\n
\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Motherboard ModelAffected BIOS VersionFixed BIOS Version
PRIME Z390-Athrough 21012203
PRIME Z390-A/H10through 21012203
ROG MAXIMUS XI HEROthrough 21012203
ROG MAXIMUS XI HERO (WI-FI)through 21012203
ROG MAXIMUS XI FORMULAthrough 21012203
ROG MAXIMUS XI CODEthrough 21012203
ROG MAXIMUS XI EXTREMEthrough 21012203
ROG MAXIMUS XI APEXthrough 21012203
ROG MAXIMUS XI GENEthrough 21012203
ROG STRIX Z390-E GAMINGthrough 21012203
ROG STRIX Z390-F GAMINGthrough 21012203
Pro WS C246-ACEthrough 21012203
WS Z390 PROthrough 14011502
\n
\n

CVE-2026-93495
CVSS 4.0 Score：7.0 / High
AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
","publishedDate":"1790824466120","updateDate":"1790820000000"},{"id":3119,"title":"Security Update for ASUS Router Firmware ","type":"Security Bulletin","affectedProducts":"
3.0.0.6_102 series
","cve":"
CVE-2026-14157
","popUpContent":"
\n
[Security Bulletin]
ASUS has released a security update for ASUS router firmware to address a reported vulnerability and strongly recommends updating to the latest firmware version to ensure optimal protection.
\n
This update addresses a security vulnerability in the router's web management interface. If exploited, the issue could allow a remote authenticated attacker to upload a crafted VPN client configuration file and execute arbitrary commands on the device.
\n
ASUS strongly recommends that all users update their router firmware to the latest version immediately. The latest firmware can be found on the ASUS Support page at https://www.asus.com/support/ or the relevant product page at https://www.asus.com/Networking/.
\n
Mitigation
\n
Before applying the firmware update, users can reduce their exposure by taking the following actions:
\n\n
CVE-2026-14157
CVSS 4.0 Score：9.4 / Critical
AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
\n
 
\n
","publishedDate":"1790823894233","updateDate":"1790820000000"},{"id":3118,"title":"Security Update for ASUS Router Firmware","type":"Security Bulletin","affectedProducts":"
3.0.0.4_386 series
3.0.0.4_388 series
3.0.0.6_102 series
","cve":"
CVE-2026-13313
","popUpContent":"

[Security Bulletin]
ASUS has released a security update for ASUS router firmware to address a reported vulnerability and strongly recommends updating to the latest firmware version to ensure optimal protection.
This update addresses a security vulnerability in certain router firmware. If exploited, the issue could allow a remote authenticated attacker to execute commands with elevated privileges on the device.
ASUS strongly recommends that all users update their router firmware to the latest version immediately. The latest firmware can be found on the ASUS Support page at https://www.asus.com/support/or the relevant product page at https://www.asus.com/Networking/.

Mitigation
In addition to updating firmware, ASUS recommends the following actions to reduce risk:
Use strong, unique passwords for your router administration page (at least 10 characters, with a mix of uppercase letters, numbers, and symbols) to prevent unauthorized administrative access.
Do not run scripts, tools, or commands from untrusted sources on any device within your local network. Attackers may use social engineering to trick administrators into executing crafted commands that interact with the router's administration interface.
For EOL models no longer supported by new firmware, ensure router login and WiFi passwords are strong and unique. Refer to the ASUS EOL product list at https://www.asus.com/event/network/eol-product/.

CVE-2026-13313
CVSS 4.0 Score：8.9 / High 
AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

","publishedDate":"1790823551657","updateDate":"1790820000000"},{"id":3112,"title":"Security Update for ASUS Control Center Express Agent","type":"Security Bulletin","affectedProducts":"
\n
affect versions prior to v1.7.24
\n
","cve":"
\n
CVE-2026-19397
\n
","popUpContent":"
\n
[Security Bulletin]
\n
ASUS has released a Software Update for ASUS Control Center Express and strongly
\n
recommends that users update their installation immediately.
\n
This update addresses a security vulnerability affecting versions earlier than v1.7.24.
\n
If exploited, the issue could allow an unauthorized user to gain control of the host system.
\n
 
\n
\n
To update:
\n
1. Download and install ASUS Control Center Express v1.7.24 or later from the official ASUS Control
\n
   Center Express download page.
\n
2. Select the target devices in the device list.
\n
3. Go to \"Select Function\" > \"Client Agent Updater\" to update the client agents.
\n
4. Verify that the agent version shows the updated version.
\n
 
\n
\n
\n
\n
 
\n
CVE-2026-19397
\n
CVSS 4.0 Score：7.7 / High
AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
\n
","publishedDate":"1788853102070","updateDate":"1788832920000"},{"id":3111,"title":"Security Update for Armoury Crate App","type":"Security Bulletin","affectedProducts":"
Armoury Crate through v6.5.7.0
","cve":"
\n
\n
CVE-2026-12962
\nCVE-2026-18023
\n
CVE-2026-16003
CVE-2026-16004
CVE-2026-16005
CVE-2026-16006
\nCVE-2026-75808
CVE-2026-75809
CVE-2026-75810
CVE-2026-75811
","popUpContent":"
[Security Bulletin]
\n
ASUS has released a Software Update for Armoury Crate, a system management software. 
\n
This update includes important security updates, and ASUS strongly recommends that users
\n
update their Armoury Crate installation to the latest version.
The latest Software Update can be received by opening Armoury Crate,
\n
in the “Settings”> “Update Center” tab, and clicking “Check for Updates”.
\n
Click “Update” on Armoury Crate if the new version is available. 

\n
\n
\n
CVE-2026-12962
\n
CVSS 4.0 Score：5.3 / medium
\n
AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L
\n
\n
 
\n
\n
CVE-2026-16003
\n
CVSS 4.0 Score：2.0 / Low 
AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
\n
 
\n
CVE-2026-16004
\n
CVSS 4.0 Score：5.9 / Medium 
AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N
\n
 
\n
CVE-2026-16005
\n
CVSS 4.0 Score：5.8 / Medium 
AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
\n
 
\n
CVE-2026-16006
\n
CVSS 4.0 Score：5.8 / Medium 
AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
\n
 
\n
\n
\n
\n
\n
CVE-2026-18023
\n
CVSS 4.0 Score：5.7 / Medium 
AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
\n
\n
 
\n
CVE-2026-75808
\n
CVSS 4.0 Score：5.7 / medium
AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
\n
 
\n
\n
CVE-2026-75809
\n
CVSS 4.0 Score：5.9 / medium
AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N
\n
 
\n
\n
CVE-2026-75810
\n
CVSS 4.0 Score：5.7 / medium
AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
\n
 
\n
\n
CVE-2026-75811
\n
CVSS 4.0 Score：5.8 / medium
AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
\n
\n
\n
\n
","publishedDate":"1788852270070","updateDate":"1788832800000"},{"id":3110,"title":"Security Update for ASUS Control Center","type":"Security Bulletin","affectedProducts":"
ASUS Control Center Enterprise (ACC) 4.0.0.2 and earlier
","cve":"
CVE-2026-75754
","popUpContent":"

[Security Bulletin]
ASUS has released a security update for ASUS Control Center and strongly recommends
updating to the latest version immediately.
This update addresses a critical security vulnerability in ASUS Control Center. 
If exploited, the issue could allow an unauthorized remote attacker to gain 
full administrative control of the system.
ASUS strongly recommends that all users immediately update ASUS Control Center to 
version v3.1.0.9 or later.

\n

CVE-2026-75754 
CVSS 4.0 Score：10.0 / Critical 
AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

","publishedDate":"1788515047990","updateDate":"1788487080000"}],"pageNum":1,"totalSize":121}}