{"id":"CVE-2026-88710","published":"2026-11-10T02:16:45.963","lastModified":"2026-11-11T05:19:54.507","description":"Improper\nneutralization of special elements used in an OS command in certain\nASUS Router firmware\nallows an unauthenticated nearby user to trigger a chain of\nactions—unauthenticated queries, identifier guessing, credential overwriting,\nand command injection—resulting in the execution of arbitrary commands with\nroot privileges.\nRefer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://www.asus.com/security-advisory","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}