CVE-2022-26674

9.8 criticalEPSS 2.8%

Critical (9.8) in asus rt-ax88u firmware. EPSS 2.8% chance of exploitation in the next 30 days.

ASUS RT-AX88U has a Format String vulnerability, which allows an unauthenticated remote attacker to write to arbitrary memory address and perform remote arbitrary code execution, arbitrary system operation or disrupt service.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.8% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
CWE: CWE-134
Published: 2022-04-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

asus:rt-ax88u_firmware

References

https://www.twcert.org.tw/tw/cp-132-6043-0f72c-1.html
https://www.twcert.org.tw/tw/cp-132-6043-0f72c-1.html

Check your stack JSON