CyberSecBulletin

Asuswrt-Merlin vulnerabilities

We track 1 vulnerability in Asuswrt-Merlin products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2022.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Asuswrt-Merlin vulnerabilities

  • 9.8 Critical severity

    Asuswrt-Merlin New Gen: Out-of-bounds Write

    CVE-2022-26376Asuswrt-MerlinEPSS 1.49%

    A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network reques