What’s Vulnerable › Vulnerabilities

CVE-2026-16528

• Severity: high (CVSS 8.4 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-07 · updated 2026-10-07
• Weakness: CWE-532

Description

Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker to obtain DDNS credentials from the system log, potentially enabling modification of DNS settings.Refer to the ' Security Update for ASUS Router Firmware  ' section on the ASUS Security Advisory for more information.

Affected products

• ASUS Router: 3.0.0.4.386 series, 3.0.0.4.388 series, 3.0.0.6.102 series

References

• https://www.asus.com/security-advisory

Get alerted when CVE-2026-16528 or the next vulnerability affects your stack