[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbaFdT8N9yfj_JQhfslfKwm0zEvKlxEW0m0KR-fukAnQ":3,"g5a-ex:asus\u002Frt-ac86u_firmware@*":111,"g5a-family:asus\u002Frt-ac86u_firmware":113},{"success":4,"data":5},true,{"product":6,"versions":30,"topVulnerabilitiesByEpss":36,"kevVulnerabilities":88,"seoMetadata":89,"meta":108},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":29},"asus","rt-ac86u_firmware",5,19,0,"2023-09-07",[14,18,21,23,26],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"3.0.0.4.384.20648",1,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"3.0.0.4.386.45956",3,{"version":22,"cve_count":16,"kev_count":11,"has_kev":17},"3.0.0.4.386.46061",{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"3.0.0.4.386.51255",2,{"version":27,"cve_count":28,"kev_count":11,"has_kev":17},"3.0.0.4_386_51529",10,"Rt-ac86u Firmware by Asus is a technology product with 5 tracked versions and 19 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[31,32,33,34,35],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":16,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},{"version":27,"cve_count":28,"kev_count":11,"has_kev":17},[37,45,53,58,64,70,74,78,81,85],{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":44},"CVE-2023-35086","\nIt is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by directly using input as a format string when calling syslog in logmessage_normal function, in the do_detwan_cgi module of httpd. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.\n\nThis issue affects RT-AX56U V2: 3.0.0.4.386_50460; RT-AC86U: 3.0.0.4_386_51529.\n\n","2023-07-21",7.2,"v3.1","High",0.39705,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":49,"cvssVersion":50,"severity":51,"isKev":17,"epssScore":52},"CVE-2018-8826","ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N600 routers with firmware before 3.0.0.4.380.10446; RT-AC55U and RT-AC55UHP routers with firmware before 3.0.0.4.382.50276; RT-AC86U and RT-AC2900 routers with firmware before 3.0.0.4.384.20648; and possibly other RT-series routers allow remote attackers to execute arbitrary code via unspecified vectors.","2018-04-20",9.8,"v3.0","Critical",0.04271,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":49,"cvssVersion":50,"severity":51,"isKev":17,"epssScore":57},"CVE-2018-9285","Main_Analysis_Content.asp in \u002Fapply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC3100 devices before 3.0.0.4.384_10007; RT-N18U devices before 3.0.0.4.382.39935; RT-AC87U and RT-AC3200 devices before 3.0.0.4.382.50010; and RT-AC5300 devices before 3.0.0.4.384.20287 allows OS command injection via the pingCNT and destIP fields of the SystemCmd variable.","2018-04-04",0.03613,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":63},"CVE-2021-3128","In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware \u003C 3.0.0.4.386.42095 or \u003C 9.0.0.4.386.41994, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set.","2021-04-12",7.5,0.02184,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":69},"CVE-2023-28702","ASUS RT-AC86U does not filter special characters for parameters in specific web URLs. A remote attacker with normal user privileges can exploit this vulnerability to perform command injection attack to execute arbitrary system commands, disrupt system or terminate service.","2023-06-02",8.8,0.01233,{"cveId":71,"description":72,"publishedDate":12,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":73},"CVE-2023-39238","\nIt is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its set_iperf3_svr.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.\n\n",0.01187,{"cveId":75,"description":76,"publishedDate":12,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":77},"CVE-2023-39240","\nIt is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is caused by lacking validation for a specific value within its set_iperf3_cli.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.\n\n",0.01158,{"cveId":79,"description":80,"publishedDate":12,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":77},"CVE-2023-39239","\nIt is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its  apply.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.\n\n",{"cveId":82,"description":83,"publishedDate":12,"cvssScore":68,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":84},"CVE-2023-38031","\nASUS RT-AC86U Adaptive QoS - Web History function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.\n\n\n\n",0.01056,{"cveId":86,"description":87,"publishedDate":12,"cvssScore":68,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":84},"CVE-2023-38033","\nASUS RT-AC86U unused Traffic Analyzer legacy Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.\n\n",[],{"title":90,"metaDescription":91,"keywords":92,"structuredData":93},"Rt-ac86u Firmware by Asus - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Rt-ac86u Firmware by Asus covering 5 versions with 19 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Rt-ac86u Firmware vulnerabilities, Rt-ac86u Firmware security, Rt-ac86u Firmware CVE, Asus Rt-ac86u Firmware, Rt-ac86u Firmware threat intelligence, Asus security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":94,"@type":95,"name":96,"description":91,"url":97,"manufacturer":98,"applicationCategory":102,"softwareVersion":103,"mainEntity":104},"https:\u002F\u002Fschema.org","SoftwareApplication","Rt-ac86u Firmware","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fasus\u002Frt-ac86u_firmware",{"@type":99,"name":100,"url":101},"Organization","Asus","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fasus","Security Software","5 versions tracked",{"@type":105,"name":106,"description":107,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Rt-ac86u Firmware Security Vulnerabilities","Security vulnerabilities affecting Rt-ac86u Firmware by Asus",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":109,"apiVersion":110},"2026-10-28T21:18:31.006Z","3.0",{"rows":112,"total":11,"capped":17,"failed":11},[],[]]