ASUS RT-AX88U - Format String

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/en/cp-139-6054-e361e-2.html
• https://nvd.nist.gov/vuln/detail/CVE-2022-26674
• https://github.com/advisories/GHSA-c8vq-g263-292w
• https://nvd.nist.gov/vuln/detail/CVE-2023-41349
• https://www.snbforums.com/threads/asus-rt-ax88u-externally-controlled-format-string-security-vulnerability.86829/
• https://www.twcert.org.tw/en/cp-139-7411-0cceb-2.html
• https://www.sentinelone.com/vulnerability-database/cve-2022-26674/
• https://github.com/advisories/GHSA-xqpv-jvpq-xjvc

Related Vulnerabilities

• PoCCVE-2026-11801: WPAdverts <= 2.3.2 - Information Disclosure
• PoCCVE-2026-17594: Sonatype Nexus Repository < 3.95.0 - Privilege Escalation via Repository Format Mismatch
• PoCCVE-2026-10768: Drupal LocalGov Workflows < 1.6.0 - Information Disclosure
• PoCCVE-2026-27796: Homarr < 1.54.0 - Information Disclosure
• PoCCVE-2026-58644: Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCE
• 关于U9 cloud接口存在BinaryFormatter反序列化漏洞的安全通告
• PoCCVE-2026-1980: WPBookit <= 1.0.8 - Unauthenticated Customer Information Disclosure
• PoCCVE-2026-8386: WP Go Maps < 10.0.10 - Unauthenticated Marker Information Disclosure
• FOSSBilling /system/string_render 命令执行漏洞（CVE-2026-28496）
• PoCCVE-2026-22778: vLLM 0.8.3 - 0.14.0 - Information Disclosure
• PoCCVE-2026-8383: LearnPress < 4.3.7 - Information Disclosure
• PoCweaver-getemdslist-disclosure: Weaver E-cology getEmDsList Sensitive Information Disclosure
• PoCCVE-2026-54236: vLLM <= 0.23.0 - Anthropic Router Heap Address Information Leak