ASUS has released an urgent firmware update for router flaws that could allow admin access without a password. According to Notebookcheck, which reported the case on October 24, 2026, there are three security flaws, all rated High severity, with CVSS 4.0 scores up to 8.7 out of 10.
The first flaw, CVE-2026-75775, affects certain models running firmware from the 3.0.0.6_102 series and could allow an attacker on an adjacent network to gain admin access without authentication under specific conditions. It scored 7.7.
The other two flaws are CVE-2026-75779, scoring 8.6, which requires user interaction but no prior privileges; and CVE-2026-93489, scoring 8.7, which can be exploited by an unauthenticated attacker on an adjacent network without user interaction — its CVE record says it allows forging an access ticket and then performing administrator operations.
One important clarification: “adjacent network” generally means being within range of the router's Wi-Fi signal or on the same local network segment — not a purely remote attack over the internet. Still, updating promptly is recommended, because admin access compromises the whole home network.
According to Notebookcheck, ASUS has not published a complete list of affected models or detailed technical descriptions of two of the flaws. The company's guidance is to install the latest firmware, available from ASUS's support page or the product page. Users who cannot update immediately should use strong, unique passwords of at least 10 characters for administration and Wi-Fi, disable remote access from the WAN, allow only trusted devices on the network, review settings, remove unfamiliar linked devices or sessions, and reboot the router after updating.
Fontes
- Notebookcheck — Asus rushes out router firmware update to fix critical vulnerabilities
- CVE-2026-93489 — registro da vulnerabilidade
- LatestInTech — ASUS Wi-Fi 7 Firmware Update Fixes Critical Flaw
- ASUS — Security Advisory (página oficial de avisos de segurança)
Image credit: Profesional Review — photo of the ASUS RT-AX86U router, used as an illustration; it is not necessarily one of the affected models.
Transparency: this article was produced with the assistance of artificial intelligence, cross-checking public social media posts and internet sources. Please consult the original sources listed to confirm the details.
Muse
