{"id":"CVE-2026-14911","published":"2026-10-07T03:16:58.670","lastModified":"2026-10-07T19:17:35.867","description":"Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS router modules allows a remote attacker to read DOM information, modify router settings, and cause a denial-of-service condition when an authenticated user visits a crafted URL.Refer to the '\nSecurity Update for ASUS Router Firmware  ' section on the ASUS Security Advisory for more information.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://www.asus.com/security-advisory/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}