CVE-2026-14157

ASUS Router modules are vulnerable to a critical issue that allows remote authenticated users to execute arbitrary commands due to the use of an externally controlled format string. This vulnerability can be exploited through a crafted file uploaded via the web management interface, potentially leading to unauthorized access and control over the device. Organizations using affected ASUS Router products should prioritize patching this vulnerability to mitigate the risk of exploitation.