CVE-2026-75779 Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-75779?
CVE-2026-75779 is a high-severity vulnerability in ASUS Router, published on 23 Oct 2026.
Official description
Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS router model allow an attacker to trick a logged-in administrator into visiting a phishing website, causing the router to execute arbitrary commands with root privileges. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
Which versions are affected by CVE-2026-75779?
How do I fix CVE-2026-75779?
No fix has been published for CVE-2026-75779 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-75779 being exploited?
There is no known exploitation of CVE-2026-75779 in the wild and no public exploit code.
Sources
Also known as GHSA-972j-5cwg-mx9h.