ASUS published four separate security advisories on November 4. Two concern the firmware of home routers, and two concern helper applications on the Windows side. The highest-risk vulnerability is in the AiCloud feature on routers.
AiCloud vulnerability grants root privileges
CVE-2026-84730 was recorded as a stack-based buffer overflow in the AiCloud feature. According to the NVD entry, an unauthenticated attacker on the same network can execute arbitrary commands with root privileges by sending a crafted device name. The CVSS 4.0 score is 8.7.
There is a second vulnerability in the same firmware branch: CVE-2026-84729, an out-of-bounds write error in the network service. This time, an attacker can trigger a denial of service (DoS), with a score of 7.2.
The affected series are listed in the advisories as 3.0.0.4_386, 3.0.0.4_388, and 3.0.0.6_102. Updated firmware has been released for all of these series.
If you cannot update, turn off AiCloud
ASUS recommends disabling the AiCloud feature for those who cannot apply the patch immediately. In addition, the router management interface should be accessible only from a trusted local network, remote access from the WAN should be disabled, and unused USB or printer sharing features should be disabled. The advisory also says to restart the router after patching.
The new firmware can be downloaded by searching for the model name on the ASUS support page or the router’s own product page. If automatic updates are disabled, the file must be uploaded manually.
Two patches on the Windows side
CVE-2026-112116 closes an access control flaw in the ASUS System Control Interface driver. Versions between 3.1.66.0 and 3.1.69.0 are affected; a low-privileged local user can write to physical memory with crafted requests and take over the system. The score is 8.5. The patch is available through the MyASUS app, the ASUS support site, or Windows Update.
CVE-2026-110464 in Armoury Crate is a more limited privilege issue with a score of 6.9. Versions between 5.4.10 and 6.5.14 are affected. You can install the new version by opening Armoury Crate and going to Settings, Update Center, and Check for Updates.
Who is affected
The router vulnerabilities can only be exploited from the local network, meaning the attacker needs access to the WiFi or wired network. However, because the AiCloud vulnerability does not require authentication, compromising any device on the network may be enough to pivot to the router. ASUS has not shared information indicating that the vulnerabilities are being actively exploited.
Source: ASUS Security Advisory
Share your experience
Bir sorunun, farklı bir çözümün veya eklemek istediğin bir notun var mı? Giriş yapmadan da yazabilirsin.