---
id: CVE-2026-75753
title: "Missing Authentication for a Critical Function\_ in certain ASUS routers\_allows an unauthorized nearby user to send specific commands via HTTP requests, causing the router to return device identification information and switch into a spec…"
summary: "Missing Authentication for a Critical Function\_ in certain ASUS routers\_allows an unauthorized nearby user to send specific commands via HTTP requests, causing the router to return device identification information and switch into a spec…"
severity: medium
cvss: 5.3
cvssVector: 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N'
cvssSource: cna
cwe:
  - CWE-306
vendor: ASUS
product: Router
affected:
  - Router 3.0.0.4.388 series
published: '2026-10-20'
updated: '2026-10-20'
sourceUpdated: '2026-10-20T02:00:27.616Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-75753'
references:
  - url: 'https://www.asus.com/security-advisory'
tags:
  - cve.org
ingestedAt: '2026-10-20T02:51:19.464Z'
---

## Overview

Missing Authentication for a Critical Function  in certain ASUS routers allows an unauthorized nearby user to send specific commands via HTTP requests, causing the router to return device identification information and switch into a specific mode. As a result, when the router encounters abnormal conditions, it may be unable to perform self-recovery.
Refer to the '
Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.

## Affected

- `Router 3.0.0.4.388 series`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.