Information disclosure in ASUS Router

CVE-2026-16528

Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker to obtain DDNS credentials from the system log, potentially enabling modification of DNS settings.Refer to the ' Security Update for ASUS Router Firmware  ' section on the ASUS Security Advisory for more information.

Published · last modified .

EPSS exploit prediction

No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.

Affected products

  • ASUS Router — versions 3.0.0.4.386 series, 3.0.0.4.388 series, 3.0.0.6.102 series

Weakness classification (CWE)

References