CVE-2026-17518: Router ASUSWRT 3.0.0.4_386 series, ASUSWRT 3.0.0.4_388 series

Affected technology

Router · ASUSWRT 3.0.0.4_386 series, ASUSWRT 3.0.0.4_388 series
ASUS

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Adjacent network · High privileges required · No user interaction required

What an attacker can do

An adjacent authenticated user can corrupt device operations and cause a denial of service via an HTTP request with input exceeding the expected length. Source advisory’s CVSS 4.0 assessment (base score 8.2/10) rates confidentiality impact as none; integrity and availability impact as high.