CVE-2022-26376mediumCWE-787

CVE-2022-26376: medium-severity vulnerability in Asuswrt-Merlin New Gen

Published · Updated

Follow this CVE+ Monitor Asuswrt-Merlin New Gen

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 1.5%
A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
Asuswrt-Merlin · Asuswrt-Merlin New Gen