ASUS Router Firmware Vulnerability Allows Local Denial of Service Attack

ASUS router firmware contains a buffer overflow vulnerability that allows an authenticated user on the local network to disrupt device operations. The flaw, tracked as CVE-2026-17518, enables attackers to cause a denial of service by sending HTTP requests with input exceeding expected lengths.

What happened

The National Vulnerability Database records CVE-2026-17518 as a High severity issue with a CVSS score of 8.2. The vulnerability stems from a buffer copy operation that fails to check the size of incoming input data. This weakness corresponds to CWE-121 in the Common Weakness Enumeration dictionary. It specifically impacts ASUS routers running the ASUSWRT 3.0.0.4_386 series and the ASUSWRT 3.0.0.4_388 series firmware versions.

An adjacent authenticated user can exploit this flaw by transmitting an HTTP request that contains data longer than the system expects to handle. This action corrupts device operations and results in a denial of service condition. The source material directs readers to the Security Update for ASUS Router Firmware section on the ASUS Security Advisory for further details. No specific release date for a fix is provided in the advisory reference.

Why it matters

A denial of service on a home or small office router cuts off all internet connectivity for every device behind it. Because the attacker must be an authenticated user on the local network, the threat primarily comes from compromised accounts or insider misuse. The High severity rating reflects the potential impact on device availability.

Network administrators must assume that any user with login access to the router interface could potentially weaponize this flaw. The source material does not confirm the availability of a firmware update, leaving these specific ASUSWRT versions potentially exposed. Administrators should monitor official channels for confirmed remediation steps.

What to watch

• Monitor ASUS security advisories for the release of updated firmware versions for the 386 and 388 series.
• Watch for unusual HTTP traffic patterns from local devices that might indicate exploitation attempts.
• Check internal logs for repeated failed or oversized request submissions to the router management page.
• Verify if any third-party security tools have released temporary detection signatures for this specific buffer overflow.

Who needs to act first

Teams should prioritize identifying all ASUS routers running the affected 386 and 388 firmware versions on their networks. Before attempting any changes, administrators must create full configuration backups of these devices to ensure recovery is possible if a test update fails.

Exposure should be reduced immediately by revoking unnecessary administrative accounts and enforcing strict password policies for local network users. Organizations should isolate these devices from sensitive internal segments if possible, limiting which authenticated users can reach the management interface. Testing any future vendor updates in a isolated lab environment remains essential to prevent further instability.

Background: CVSS score

The CVSS score explains vulnerability severity using a 0.0 to 10.0 scale. It measures attack vector, complexity, privileges required, and impact on confidentiality, integrity, and availability. You use this metric to prioritize patches, though you must adjust it for your specific environment to avoid wasting time on irrelevant threats.

Read the full guide: CVSS Score Explained: How to Read Risk Metrics and Prioritize Fixes

What to do and how to stay safe: ASUS

• Audit your network inventory to locate any ASUS routers running ASUSWRT 3.0.0.4_386 or 3.0.0.4_388 firmware.
• Restrict administrative access to the router management interface to only essential personnel with strong credentials.
• Monitor local network traffic for signs of unauthorized or excessive HTTP requests to router IP addresses.
• Keep an eye on official ASUS channels for the eventual release of a patching firmware update.

Step-by-step guide: Password Policy Checklist for Secure Identity Management

General security guidance from the Patch Gazette newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Which ASUS router models are affected by CVE-2026-17518?

The vulnerability affects ASUS routers running the ASUSWRT 3.0.0.4_386 series and the ASUSWRT 3.0.0.4_388 series firmware.

Is there a confirmed patch available for this vulnerability?

No, the source material references a security advisory but does not confirm that a firmware update or fix has been released.

What is the severity of this buffer overflow flaw?

The National Vulnerability Database rates CVE-2026-17518 as High severity with a CVSS score of 8.2.