CVE-2026-13313CWE-489

CVE-2026-13313

published October 1, 2026

CVSS
8.9
EPSS
1%
Percentile
52.0
In the wild
Unconfirmed
What it is

An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security mechanisms and enable the Telnet service, thereby executing arbitrary commands with root privileges and potentially affecting other devices connected to the router.

Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.

The record
Technical detail
CVSS
8.9 · NONE
CVSS v4.0
8.9 · CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00683 · 52.0th percentile
Weakness
CWE-489 · Active Debug Code
Published
2026-10-01T06:16Z
References (1)
EPSS history
Timeline
  • 03 OCT 03:41Z
    EPSS moved — → 1%
    epss
  • 01 OCT 02:00Z
    An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security mechanisms…
    cvelistv5