CVE-2026-17518: CWE-121: Stack-based Buffer Overflow in ASUS Router

This vulnerability involves a stack-based buffer overflow (CWE-121) in ASUS routers caused by improper input size validation during a buffer copy operation. An adjacent authenticated attacker can exploit this by sending an HTTP request with input longer than expected, leading to corruption of device operations and denial of service. The CVSS 4.0 vector indicates the attack requires adjacent network access, low attack complexity, no user interaction, and high privileges. The vulnerability does not involve confidentiality, integrity, or availability impacts beyond denial of service. No vendor patch or remediation details are provided in the input data.

An adjacent authenticated user can exploit this vulnerability to cause denial of service on affected ASUS routers by sending specially crafted HTTP requests with oversized input. This disrupts device operations but does not indicate direct compromise of confidentiality or integrity. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the ASUS Security Advisory for current remediation guidance. Since no patch or workaround information is provided, users should monitor official ASUS communications for updates. No vendor advisory content is available to indicate if no action is required or if the issue is already mitigated.