https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T03:39:48.382741+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-04333 bdu:2023-04333 2026-10-08T03:39:48.470880+00:00 bdu:2023-04333 https://cve.radiocsirt.org/vuln/euvd-2026-197255 EUVD-2026-197255 2026-10-08T03:39:48.470944+00:00 EUVD-2026-197255 https://cve.radiocsirt.org/vuln/fkie_cve-2023-35086 fkie_cve-2023-35086 2026-10-08T03:39:48.470969+00:00

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by directly using input as a format string when calling syslog in logmessage_normal function, in the do_detwan_cgi module of httpd. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.

This issue affects RT-AX56U V2: 3.0.0.4.386_50460; RT-AC86U: 3.0.0.4_386_51529.

 https://cve.radiocsirt.org/vuln/ghsa-r4fx-9v33-wcf4 GHSA-r4fx-9v33-wcf4 2026-10-08T03:39:48.471017+00:00

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by directly using input as a format string when calling syslog in logmessage_normal function, in the do_detwan_cgi module of httpd. An unauthenticated remote attacker without privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.

This issue affects RT-AX56U V2: 3.0.0.4.386_50460; RT-AC86U: 3.0.0.4_386_51529.

 https://cve.radiocsirt.org/vuln/gsd-2023-35086 gsd-2023-35086 2026-10-08T03:39:48.471049+00:00 gsd-2023-35086