CVE-2022-25596: ASUS Rt-AC86U Firmware

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which allows an unauthenticated LAN attacker to execute arbitrary code, perform arbitrary operations and disrupt service.

Affected products

• ASUS Rt-AC86U Firmware: version 3.0.0.4.386.45956 only

Published 2022-04-07. Last modified 2026-06-17.