Asus Issues Critical Firmware Fix for Routers
The update patches three vulnerabilities that allow unauthenticated users to gain full administrative network access.
Updated on Oct. 24, 2026 in Cybersecurity
Live Poll
Do you feel confident managing your own home network security after hearing about new router vulnerabilities?
Asus has released a critical firmware update to patch three high-severity security vulnerabilities across its router product line. These flaws could allow unauthenticated attackers on an adjacent network to gain administrative access without a password.
Why it matters
These vulnerabilities expose home and small-office networks to unauthorized administrative takeover. Promptly installing this firmware update is necessary to mitigate risks of unauthorized network control.
The patch addresses three flaws, with the most critical vulnerability registering a CVSS severity score of 8.7. Other scores include 8.6 for CVE-2026-75779 and 7.7 for CVE-2026-75775.
The players
Asus
A multinational hardware company that manufactures networking equipment, motherboards, and consumer electronics.
The details
The vulnerabilities affect devices running firmware from the 3.0.0.6_102 series, permitting attackers on an adjacent network—a network segment directly accessible to the device—to bypass authentication protocols. CVE-2026-75775 and CVE-2026-93489 allow unauthenticated administrative access, while CVE-2026-75779 requires additional user interaction to trigger. These flaws effectively remove the password barrier typically required to manage router settings.
Timeline
October 24, 2026: Asus released emergency firmware updates for affected hardware.
The Tech Race
This release follows a recurring pattern in the industry where manufacturers must issue rapid patches to address remote administrative access flaws in home networking gear. It mirrors the 2013 Netgear router administrative bypass vulnerability by highlighting the persistent challenge of securing local network gateways.
Router owners should immediately install the latest firmware available on the official support page. If immediate updates are not possible, users should disable remote WAN access and ensure administrative passwords are at least 10 characters long to mitigate risks.
The takeaway
Securing local network hardware requires active monitoring of manufacturer support portals for critical patch releases. Owners should prioritize installing these updates immediately to close unauthenticated access windows.
Further reading
For more on evolving threats to local network hardware, visit the Cybersecurity section.
Source note: This article includes information reported by Notebookcheck.
Live Poll
Do you feel confident managing your own home network security after hearing about new router vulnerabilities?
