CVE-2026-93489: Router 3.0.0.6_102 series

Affected technology

Router · 3.0.0.6_102 series
ASUS

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Adjacent network · No privileges required · No user interaction required

What an attacker can do

An unauthenticated nearby user can send an HTTP request and forge an access ticket, subsequently enabling the user to perform administrator operations. Source advisory’s CVSS 4.0 assessment (base score 8.7/10) rates confidentiality, integrity and availability impact as high.