Asus Routers - GoKawiil

Asus patches two critical router firmware flaws tied to VPN config files

Asus has issued firmware updates for two critical vulnerabilities affecting its routers. One, CVE-2026-14157 (CVSS 9.4), lets an attacker who uploads a crafted VPN client configuration file through the router's web interface execute arbitrary commands. The other, CVE-2026-13313 (CVSS 8.9), exploits leftover debug code to bypass security checks, enable Telnet, and potentially run commands with root privileges, affecting firmware series 3.0.0.6_102, 3.0.0.4_386 and 3.0.0.4_388.

tomshardware.com · 2026-10-03

FCC grants Asus routers exemption from foreign-router ban through 2028

The FCC has given Asus 'conditional approval,' clearing its routers of security concerns raised by the Defense Department and exempting them from the agency's ban on foreign-made routers until March 2028. The exemption spans multiple Asus product lines including RT, ROG, TUF Gaming and ZenWiFi Mesh series. TP-Link, despite meeting with FCC officials and arguing it operates as a US company based in California, has not yet secured similar approval.

techspot.com · 2026-09-11