CVE-2026-12960CWE-926

CVE-2026-12960

published July 3, 2026

CVSS
6.0
EPSS
0%
Percentile
4.7
In the wild
Unconfirmed
What it is

An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application on the same device to send a crafted Intent that causes ASUS Router App to open an specified URL.

Refer to the '

Security Update for ASUS Router Android App ' section on the ASUS Security Advisory for more information.

The record
Technical detail
CVSS
6.0 · NONE
CVSS v4.0
Not supplied
EPSS
0.00159 · 4.7th percentile
Weakness
CWE-926 · Improper Export of Android Application Components
Published
2026-07-03T07:16Z
References (1)
https://www.asus.com/security-advisory/ · 54bf65a7-a193-42d2-b1ba-8e150d3c35e1
EPSS history
Timeline
  • 03 JUL 02:00Z
    An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application on the same device to send a crafted…
    cvelistv5