Security Advisory

CVE-2026-13385

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-15 02:01:46
Last updated 2026-07-16 03:55:22
Assigner ASUS
CVSS score 9.5
State PUBLISHED

Description

An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS router models allows a remote man-in-the-middle(MITM) user to make the router download and execute arbitrary command via a spoofed server. Refer to the '  Security Update for ASUS Router Firmware  ' section on the ASUS Security Advisory for more information.