[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOVRhO2NdoqgAU4U7ot0VMf0MDrW3gN53kvMaRmqLFvI":3,"g5a-ex:asus\u002Frt-ac86u@*":94,"g5a-family:asus\u002Frt-ac86u":96},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":71,"seoMetadata":72,"meta":91},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"asus","rt-ac86u",0,22,"2023-09-07",[],"Rt-ac86u by Asus is a technology product and 22 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,33,38,43,49,53,59,63,67],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2023-35086","\nIt is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by directly using input as a format string when calling syslog in logmessage_normal function, in the do_detwan_cgi module of httpd. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.\n\nThis issue affects RT-AX56U V2: 3.0.0.4.386_50460; RT-AC86U: 3.0.0.4_386_51529.\n\n","2023-07-21",7.2,"v3.1","High",false,0.39705,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":23,"epssScore":32},"CVE-2018-8826","ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N600 routers with firmware before 3.0.0.4.380.10446; RT-AC55U and RT-AC55UHP routers with firmware before 3.0.0.4.382.50276; RT-AC86U and RT-AC2900 routers with firmware before 3.0.0.4.384.20648; and possibly other RT-series routers allow remote attackers to execute arbitrary code via unspecified vectors.","2018-04-20",9.8,"v3.0","Critical",0.04271,{"cveId":34,"description":35,"publishedDate":36,"cvssScore":29,"cvssVersion":21,"severity":31,"isKev":23,"epssScore":37},"CVE-2018-20334","An issue was discovered in ASUSWRT 3.0.0.4.384.20308. When processing the \u002Fstart_apply.htm POST data, there is a command injection issue via shell metacharacters in the fb_email parameter. By using this issue, an attacker can control the router and get shell.","2020-03-20",0.0383,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":23,"epssScore":42},"CVE-2018-9285","Main_Analysis_Content.asp in \u002Fapply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC3100 devices before 3.0.0.4.384_10007; RT-N18U devices before 3.0.0.4.382.39935; RT-AC87U and RT-AC3200 devices before 3.0.0.4.382.50010; and RT-AC5300 devices before 3.0.0.4.384.20287 allows OS command injection via the pingCNT and destIP fields of the SystemCmd variable.","2018-04-04",0.03613,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":48},"CVE-2021-3128","In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware \u003C 3.0.0.4.386.42095 or \u003C 9.0.0.4.386.41994, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set.","2021-04-12",7.5,0.02184,{"cveId":50,"description":51,"publishedDate":36,"cvssScore":47,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":52},"CVE-2018-20335","An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can trigger a DoS of the httpd service via the \u002FAPP_Installation.asp?= URI.",0.01408,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":58},"CVE-2023-28702","ASUS RT-AC86U does not filter special characters for parameters in specific web URLs. A remote attacker with normal user privileges can exploit this vulnerability to perform command injection attack to execute arbitrary system commands, disrupt system or terminate service.","2023-06-02",8.8,0.01233,{"cveId":60,"description":61,"publishedDate":36,"cvssScore":47,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":62},"CVE-2018-20333","An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can request \u002Fupdate_applist.asp to see if a USB device is attached to the router and if there are apps installed on the router.",0.01209,{"cveId":64,"description":65,"publishedDate":11,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":66},"CVE-2023-39238","\nIt is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its set_iperf3_svr.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.\n\n",0.01187,{"cveId":68,"description":69,"publishedDate":11,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":70},"CVE-2023-39239","\nIt is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its  apply.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.\n\n",0.01158,[],{"title":73,"metaDescription":74,"keywords":75,"structuredData":76},"Rt-ac86u by Asus - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Rt-ac86u by Asus with 22 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Rt-ac86u vulnerabilities, Rt-ac86u security, Rt-ac86u CVE, Asus Rt-ac86u, Rt-ac86u threat intelligence, Asus security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":77,"@type":78,"name":79,"description":74,"url":80,"manufacturer":81,"applicationCategory":85,"softwareVersion":86,"mainEntity":87},"https:\u002F\u002Fschema.org","SoftwareApplication","Rt-ac86u","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fasus\u002Frt-ac86u",{"@type":82,"name":83,"url":84},"Organization","Asus","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fasus","Security Software","Multiple versions",{"@type":88,"name":89,"description":90,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Rt-ac86u Security Vulnerabilities","Security vulnerabilities affecting Rt-ac86u by Asus",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":92,"apiVersion":93},"2026-10-28T19:34:40.890Z","3.0",{"rows":95,"total":9,"capped":23,"failed":9},[],[97],{"product":98,"cves":99},"rt-ac86u_firmware",19]