Do Son 
TL;DR
ASUS issued four security alerts on November 4, 2026. These notices resolve four serious ASUS security vulnerabilities in router firmware and PC software. The worst bug lets adjacent attackers gain root control on routers. Therefore, users must install the latest patches right away. They need to protect their devices from harm.
- Product: ASUS (3 products)
- Vulnerabilities: 4 flaws (CVE-2026-84730, CVE-2026-84729, CVE-2026-112116, CVE-2026-110464)
- Highest severity: 8.7 (High · CVSSv4)
- Status: No confirmed exploitation yet
- Action: See vendor advisories
| CVE | CVSS (CVSSv4) | Status |
|---|---|---|
| CVE-2026-84730 | 8.7 | Not exploited |
| CVE-2026-112116 | 8.5 | Not exploited |
| CVE-2026-84729 | 7.2 | Not exploited |
| CVE-2026-110464 | 6.9 | Not exploited |
Why It Matters
ASUS routers and laptops support millions of homes and small offices worldwide. Industry data shows that millions of active routers run ASUS code at the network edge. In addition, millions of PC owners run ASUS software on Windows. Consequently, bugs in these tools put home networks and PCs at risk. Intruders can seize control or crash devices.
Fortunately, ASUS confirmed that no active exploitation in the wild has occurred. Furthermore, researchers have published no public exploit code for these bugs.
How the Attack Works
The security notices outline flaws across router firmware, device drivers, and system tools.
AiCloud Stack Buffer Overflow
First, CVE-2026-84730 is a buffer overflow bug in the router AiCloud tool. The advisory notes: “This update addresses a security vulnerability in the AiCloud feature of certain ASUS router models.” The flaw lets an adjacent attacker send a crafted device name. In turn, this action lets the attacker run shell commands as root.
Out-of-Bounds Network Service Write
Second, CVE-2026-84729 involves an out-of-bounds write flaw in router network services. An unauthenticated nearby attacker can send bad packets. As a result, the attack causes a denial of service or corrupts device memory.
Kernel Memory Access via IOCTL
Third, CVE-2026-112116 impacts the ASUS System Control Interface driver. The advisory notes: the issue “could allow a local, low-privileged user to gain extensive unauthorized control over the affected system.” Specifically, a local user can send crafted IOCTL requests. This lets the user read and write physical memory.
Armoury Crate Local File Write
Finally, CVE-2026-110464 affects Armoury Crate. A missing access check lets a local attacker write files with Local System rights. Attackers can also cause a system crash.
Affected Versions
These ASUS security vulnerabilities affect ASUSWRT firmware series 3.0.0.4_386, 3.0.0.4_388, and 3.0.0.6_102. They also affect System Control Interface versions 3.1.66.0 through 3.1.69.0. In addition, they impact Armoury Crate versions v5.4.10 through v6.5.14.
Patch and Mitigation Steps
ASUS released firmware and software fixes for all affected models. Users can visit the official ASUS security advisory portal for full details. Router owners should install the newest firmware today. If they cannot update, they should turn off AiCloud. Meanwhile, PC owners should update Armoury Crate. They can apply driver fixes via MyASUS or Windows Update.
Support Our Threat Intelligence
Find our vulnerability reports and weekly recaps helpful? Support our work today and unlock a 100% ad-free reading experience!
Buy Me a Coffee
