Read the docs

Asuswrt-Merlin

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Asuswrt-Merlin records in CISA KEV

No Asuswrt-Merlin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Asuswrt-merlin 4 records MEDIUM New Gen 1 record HIGH

Records

1 record in New Gen · all components

TI-2022-09749 CVE-2022-26376 · GHSA-5v6f-j685-6xv8

Out-of-bounds write in Asuswrt-Merlin New Gen

Priority HIGH 81

A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7..

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01494 Published 2022-08-05 Fixed in 386.7 CWE-787
Open these records in search →