CVE-2026-17518
8.2HighPublished 20 Oct 2026 · NVD status: Received · AI triage by gemini-3.8-flash
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
- Impact
- High impact on integrity, availability
- Weakness
- CWE-121
Impact
Adjacent authenticated attackers with high privileges can corrupt memory and cause a denial of service on the router. Exploitation requires sending an oversized HTTP request over the local network segment.
Root cause
A stack-based buffer overflow occurs due to copying user input into a fixed-size buffer without length validation.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v4.0 · CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Fix & remediation
Upgrade to the firmware release specified in the ASUS security advisory. As an interim workaround, restrict web management access to trusted administrative hosts and avoid exposing administration interfaces to untrusted local network segments.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial of service via an HTTP request with input exceeding the expected length. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.