[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOVRhO2NdoqgAU4U7ot0VMf0MDrW3gN53kvMaRmqLFvI":3,"g5a-ex:asus\u002Frt-ac86u@*":90,"g5a-family:asus\u002Frt-ac86u":92},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":67,"seoMetadata":68,"meta":87},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"asus","rt-ac86u",0,22,"2023-09-07",[],"Rt-ac86u by Asus is a technology product and 22 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,33,38,43,49,53,58,61,64],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2023-35086","\nIt is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by directly using input as a format string when calling syslog in logmessage_normal function, in the do_detwan_cgi module of httpd. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.\n\nThis issue affects RT-AX56U V2: 3.0.0.4.386_50460; RT-AC86U: 3.0.0.4_386_51529.\n\n","2023-07-21",7.2,"v3.1","High",false,0.385,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":23,"epssScore":32},"CVE-2018-8826","ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N600 routers with firmware before 3.0.0.4.380.10446; RT-AC55U and RT-AC55UHP routers with firmware before 3.0.0.4.382.50276; RT-AC86U and RT-AC2900 routers with firmware before 3.0.0.4.384.20648; and possibly other RT-series routers allow remote attackers to execute arbitrary code via unspecified vectors.","2018-04-20",9.8,"v3.0","Critical",0.04191,{"cveId":34,"description":35,"publishedDate":36,"cvssScore":29,"cvssVersion":21,"severity":31,"isKev":23,"epssScore":37},"CVE-2018-20334","An issue was discovered in ASUSWRT 3.0.0.4.384.20308. When processing the \u002Fstart_apply.htm POST data, there is a command injection issue via shell metacharacters in the fb_email parameter. By using this issue, an attacker can control the router and get shell.","2020-03-20",0.03773,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":23,"epssScore":42},"CVE-2018-9285","Main_Analysis_Content.asp in \u002Fapply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC3100 devices before 3.0.0.4.384_10007; RT-N18U devices before 3.0.0.4.382.39935; RT-AC87U and RT-AC3200 devices before 3.0.0.4.382.50010; and RT-AC5300 devices before 3.0.0.4.384.20287 allows OS command injection via the pingCNT and destIP fields of the SystemCmd variable.","2018-04-04",0.03557,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":48},"CVE-2021-3128","In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware \u003C 3.0.0.4.386.42095 or \u003C 9.0.0.4.386.41994, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set.","2021-04-12",7.5,0.02184,{"cveId":50,"description":51,"publishedDate":36,"cvssScore":47,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":52},"CVE-2018-20335","An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can trigger a DoS of the httpd service via the \u002FAPP_Installation.asp?= URI.",0.01408,{"cveId":54,"description":55,"publishedDate":11,"cvssScore":56,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":57},"CVE-2023-38032","\nASUS RT-AC86U AiProtection security- related function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.\n\n\n\n",8.8,0.01384,{"cveId":59,"description":60,"publishedDate":11,"cvssScore":56,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":57},"CVE-2023-38031","\nASUS RT-AC86U Adaptive QoS - Web History function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.\n\n\n\n",{"cveId":62,"description":63,"publishedDate":11,"cvssScore":56,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":57},"CVE-2023-38033","\nASUS RT-AC86U unused Traffic Analyzer legacy Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.\n\n",{"cveId":65,"description":66,"publishedDate":11,"cvssScore":56,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":57},"CVE-2023-39236","\nASUS RT-AC86U Traffic Analyzer - Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.\n\n",[],{"title":69,"metaDescription":70,"keywords":71,"structuredData":72},"Rt-ac86u by Asus - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Rt-ac86u by Asus with 22 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Rt-ac86u vulnerabilities, Rt-ac86u security, Rt-ac86u CVE, Asus Rt-ac86u, Rt-ac86u threat intelligence, Asus security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":73,"@type":74,"name":75,"description":70,"url":76,"manufacturer":77,"applicationCategory":81,"softwareVersion":82,"mainEntity":83},"https:\u002F\u002Fschema.org","SoftwareApplication","Rt-ac86u","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fasus\u002Frt-ac86u",{"@type":78,"name":79,"url":80},"Organization","Asus","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fasus","Security Software","Multiple versions",{"@type":84,"name":85,"description":86,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Rt-ac86u Security Vulnerabilities","Security vulnerabilities affecting Rt-ac86u by Asus",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":88,"apiVersion":89},"2026-10-18T20:38:43.419Z","3.0",{"rows":91,"total":9,"capped":23,"failed":9},[],[93],{"product":94,"cves":95},"rt-ac86u_firmware",19]