{"id":"CVE-2026-88709","published":"2026-11-10T02:16:45.827","lastModified":"2026-11-10T20:19:44.657","description":"Improper\nneutralization of special elements used in an OS command in certain\nASUS Router firmware allows an user with physical access\nto\ninsert a USB device containing a specially crafted directory name, potentially\nexecuting arbitrary commands with root privileges.\nRefer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://www.asus.com/security-advisory","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}