CVE-2026-17518CWE-121

CVE-2026-17518

published October 20, 2026

CVSS
8.2
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial of service via an HTTP request with input exceeding the expected length.

Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.

The record
Technical detail
CVSS
8.2 · NONE
CVSS v4.0
8.2 · CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:H
EPSS
0.00147 · 3.6th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-10-20T06:17Z
References (1)
https://www.asus.com/security-advisory · 54bf65a7-a193-42d2-b1ba-8e150d3c35e1
EPSS history
Timeline
  • 21 OCT 03:28Z
    EPSS moved — → 0%
    epss
  • 20 OCT 02:00Z
    Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial…
    cvelistv5