{"id":"CVE-2026-75779","published":"2026-10-23T08:16:55.587","lastModified":"2026-10-24T04:18:18.620","description":"Improper Neutralization of Special\nElements used in an OS Command (“OS Command Injection”) and Cross-Site Request\nForgery (CSRF) in an ASUS router model allow an attacker to trick a logged-in\nadministrator into visiting a phishing website, causing the router to execute\narbitrary commands with root privileges.\nRefer to the '\nSecurity Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-78","CWE-352"],"vendors":[],"products":[],"references":[{"url":"https://www.asus.com/security-advisory","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}