Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket…
Affects ASUS routers reported as WiFi 6 and onwards, an estimated 94 models per a GitHub repository. No fix is listed in the checked facts.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- How many real-world setups can hit the bug, from the vendor's advisory and CISA data. It does not know your setup.What do these mean? →
- Unclear
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- 1 proof of concept on GitHub
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
ASUS router firmware modules are affected by a flaw that lets an unauthenticated user on the local network send a crafted HTTP request and forge an access ticket. This allows the attacker to gain administrator-level control over the router.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling the user to perform administrator operations. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
Timeline
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- CVE published
- First seen by cve.now
- Record last updated
Affected versions
- ASUS Router
3.0.0.6_102 series
References 2
asus.com
GitHub · cybersecurity/CVE-2026-93489
Questions about CVE-2026-93489
What does this mean?
The issue is an authentication bypass: an unauthenticated user nearby can send an HTTP request to forge an access ticket. Per the GitHub repository, this leads to remote code execution on affected routers.Source: github.com
Am I affected, and how do I check?
The GitHub repository estimates about 94 ASUS router models, described as WiFi 6 and onwards. To check a router, compare its model name with the model list in that repository.Source: github.com
What should I do about it?
The checked facts give no fixed version or upgrade target, so no specific update can be named from them.Source: github.com
Is it being exploited?
It is not in CISA's Known Exploited Vulnerabilities catalog, and CISA's SSVC assessment does not mark exploitation as active. That does not mean it has not been attacked: vendors and researchers can report attacks before CISA lists them. Public exploit code exists (a proof of concept on GitHub).Source: cve.now feed data
What if there's no patch?
The checked facts do not describe a workaround or any limit on the affected feature while no fix is available.Source: github.com