CVE-2023-28702: ASUS Rt-AC86U Firmware

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

ASUS RT-AC86U does not filter special characters for parameters in specific web URLs. A remote attacker with normal user privileges can exploit this vulnerability to perform command injection attack to execute arbitrary system commands, disrupt system or terminate service.

Affected products

• ASUS Rt-AC86U Firmware: version 3.0.0.4.386.51255 only

Published 2023-06-02. Last modified 2026-06-17.