CVE-2026-13313
An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated…
- Risk score
- 64/100
- CVSS
- 8.9 v4.0
- Exploit chance (30 days)
- 0.7%
- Published
- 1 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security mechanisms and enable the Telnet service, thereby executing arbitrary commands with root privileges and potentially affecting other devices connected to the router. Refer …
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 8.9 high
References
Original description
An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security mechanisms and enable the Telnet service, thereby executing arbitrary commands with root privileges and potentially affecting other devices connected to the router. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
Last activity 1 Oct 2026. Patch Forecast updates every hour.