CVE-2023-39236: ASUS Rt-AC86U Firmware

High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days.

ASUS RT-AC86U Traffic Analyzer - Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.

Affected products

• ASUS Rt-AC86U Firmware: version 3.0.0.4_386_51529 only

Published 2023-09-07. Last modified 2026-06-17.