ASUS RT-AX56U Router - Stack-based buffer overflow

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.cvedetails.com/cve/CVE-2021-44158/
• https://www.twcert.org.tw/en/cp-139-5436-94635-2.html
• https://nvd.nist.gov/vuln/detail/cve-2021-44158
• https://github.com/advisories/GHSA-m8r5-j3fq-hx58
• https://www.sentinelone.com/vulnerability-database/cve-2022-23973/
• https://nvd.nist.gov/vuln/detail/cve-2022-23973
• https://github.com/advisories/GHSA-v6gh-mj92-4mvj
• https://www.clouddefense.ai/cve/2022/CVE-2022-23973
• https://cve.yack.one/products/asus:rt-ax56u-firmware
• https://www.twcert.org.tw/tw/cp-132-5787-b0e64-1.html

Related Vulnerabilities

• PoCCVE-2026-19598: Pods <= 3.3.9 - Unauthenticated Privilege Escalation via pods_admin AJAX Router
• PoCCVE-2019-11043: PHP-FPM Path Info Buffer Underflow - Remote Code Execution
• PoCCVE-2026-19900: LB-LINK Routers - Unauthenticated Command Injection
• 9Router /api/cli-tools/cowork-settings 命令执行漏洞（CVE-2026-63732）
• PoCCVE-2026-46339: 9Router <= 0.4.36 - Unauthenticated RCE
• PoCCVE-2026-59801: 9Router - Unauthenticated LLM Provider API Exposure
• PoC9router-default-login: 9Router - Default Login
• 9Router /api/cli-tools/cowork-settings 命令执行漏洞（CVE-2026-46339）
• 9router /api/tunnel/tailscale-install 命令执行漏洞
• PoCCVE-2026-54236: vLLM <= 0.23.0 - Anthropic Router Heap Address Information Leak
• WordPress WebStack主题 /wp-admin/admin-ajax.php 文件上传漏洞（CVE-2026-1555）
• CentreStack 本地文件包含漏洞(CVE-2025-11371)
• 全程云 /OA/api/2.0/HR/EntryApply/GetBaseData SQL 注入漏洞