Vulnerability Description
Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS router model allow an attacker to trick a logged-in administrator into visiting a phishing website, causing the router to execute arbitrary commands with root privileges. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-75779?
CVE-2026-75779 is a documented vulnerability. Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS router model allow an attacker to trick a logged-in administ...
How severe is CVE-2026-75779?
CVSS scoring is not yet available for CVE-2026-75779. Check NVD for updates.
Is there a patch for CVE-2026-75779?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.