ASUS urges router owners to update after three High-rated flaws

ASUS published a router security bulletin on October 23, 2026, covering CVE-2026-75775, CVE-2026-75779 and CVE-2026-93489. The company rated all three vulnerabilities High under CVSS 4.0 and recommended installing the latest firmware for the individual router. ASUS says certain router models are affected.

The three vulnerabilities and their ratings

CVE stands for Common Vulnerabilities and Exposures, a system of identifiers for publicly disclosed security flaws. CVSS, the Common Vulnerability Scoring System, rates their severity. ASUS assigned these CVSS 4.0 scores:

ASUS describes CVE-2026-93489 as an improper-authentication flaw. Under specific conditions, an unauthenticated attacker on an adjacent network could gain administrative access to an affected router.

If you cannot update right away

ASUS recommends disabling remote access to router management from the internet, also known as WAN access, and limiting access to trusted networks and devices. Use strong, unique passwords, and remove any linked devices or companion-app sessions you do not recognize. After installing the update, reboot the router.

Find and install firmware for your ASUS router

Use ASUS Support or the product page for your exact router to find its firmware. ASUS’s general firmware instructions recommend updating through the ASUS Router app and also describe automatic updates, the web interface (WebGUI) and manual firmware upload. The instructions warn not to turn off the router while an update is in progress.

If an update fails, ASUS says to restore the router and try again. If that does not work, the company’s instructions point to the Firmware Restoration Utility in Rescue Mode; available procedures can vary by model.