CVE-2026-14157 — CVSS 9.4 CRITICAL

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface.

Loading application…