[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbaFdT8N9yfj_JQhfslfKwm0zEvKlxEW0m0KR-fukAnQ":3,"g5a-ex:asus\u002Frt-ac86u_firmware@*":108,"g5a-family:asus\u002Frt-ac86u_firmware":110},{"success":4,"data":5},true,{"product":6,"versions":30,"topVulnerabilitiesByEpss":36,"kevVulnerabilities":85,"seoMetadata":86,"meta":105},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":29},"asus","rt-ac86u_firmware",5,19,0,"2023-09-07",[14,18,21,23,26],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"3.0.0.4.384.20648",1,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"3.0.0.4.386.45956",3,{"version":22,"cve_count":16,"kev_count":11,"has_kev":17},"3.0.0.4.386.46061",{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"3.0.0.4.386.51255",2,{"version":27,"cve_count":28,"kev_count":11,"has_kev":17},"3.0.0.4_386_51529",10,"Rt-ac86u Firmware by Asus is a technology product with 5 tracked versions and 19 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[31,32,33,34,35],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":16,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},{"version":27,"cve_count":28,"kev_count":11,"has_kev":17},[37,45,53,58,64,69,72,75,78,81],{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":44},"CVE-2023-35086","\nIt is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by directly using input as a format string when calling syslog in logmessage_normal function, in the do_detwan_cgi module of httpd. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.\n\nThis issue affects RT-AX56U V2: 3.0.0.4.386_50460; RT-AC86U: 3.0.0.4_386_51529.\n\n","2023-07-21",7.2,"v3.1","High",0.385,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":49,"cvssVersion":50,"severity":51,"isKev":17,"epssScore":52},"CVE-2018-8826","ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N600 routers with firmware before 3.0.0.4.380.10446; RT-AC55U and RT-AC55UHP routers with firmware before 3.0.0.4.382.50276; RT-AC86U and RT-AC2900 routers with firmware before 3.0.0.4.384.20648; and possibly other RT-series routers allow remote attackers to execute arbitrary code via unspecified vectors.","2018-04-20",9.8,"v3.0","Critical",0.04191,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":49,"cvssVersion":50,"severity":51,"isKev":17,"epssScore":57},"CVE-2018-9285","Main_Analysis_Content.asp in \u002Fapply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC3100 devices before 3.0.0.4.384_10007; RT-N18U devices before 3.0.0.4.382.39935; RT-AC87U and RT-AC3200 devices before 3.0.0.4.382.50010; and RT-AC5300 devices before 3.0.0.4.384.20287 allows OS command injection via the pingCNT and destIP fields of the SystemCmd variable.","2018-04-04",0.03557,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":63},"CVE-2021-3128","In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware \u003C 3.0.0.4.386.42095 or \u003C 9.0.0.4.386.41994, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set.","2021-04-12",7.5,0.02184,{"cveId":65,"description":66,"publishedDate":12,"cvssScore":67,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":68},"CVE-2023-38031","\nASUS RT-AC86U Adaptive QoS - Web History function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.\n\n\n\n",8.8,0.01384,{"cveId":70,"description":71,"publishedDate":12,"cvssScore":67,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":68},"CVE-2023-38033","\nASUS RT-AC86U unused Traffic Analyzer legacy Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.\n\n",{"cveId":73,"description":74,"publishedDate":12,"cvssScore":67,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":68},"CVE-2023-38032","\nASUS RT-AC86U AiProtection security- related function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.\n\n\n\n",{"cveId":76,"description":77,"publishedDate":12,"cvssScore":67,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":68},"CVE-2023-39236","\nASUS RT-AC86U Traffic Analyzer - Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.\n\n",{"cveId":79,"description":80,"publishedDate":12,"cvssScore":67,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":68},"CVE-2023-39237","\nASUS RT-AC86U Traffic Analyzer - Apps analysis function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.\n\n",{"cveId":82,"description":83,"publishedDate":12,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":84},"CVE-2023-39238","\nIt is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its set_iperf3_svr.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.\n\n",0.01356,[],{"title":87,"metaDescription":88,"keywords":89,"structuredData":90},"Rt-ac86u Firmware by Asus - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Rt-ac86u Firmware by Asus covering 5 versions with 19 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Rt-ac86u Firmware vulnerabilities, Rt-ac86u Firmware security, Rt-ac86u Firmware CVE, Asus Rt-ac86u Firmware, Rt-ac86u Firmware threat intelligence, Asus security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":91,"@type":92,"name":93,"description":88,"url":94,"manufacturer":95,"applicationCategory":99,"softwareVersion":100,"mainEntity":101},"https:\u002F\u002Fschema.org","SoftwareApplication","Rt-ac86u Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fasus\u002Frt-ac86u_firmware",{"@type":96,"name":97,"url":98},"Organization","Asus","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fasus","Security Software","5 versions tracked",{"@type":102,"name":103,"description":104,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Rt-ac86u Firmware Security Vulnerabilities","Security vulnerabilities affecting Rt-ac86u Firmware by Asus",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":106,"apiVersion":107},"2026-10-18T23:03:50.583Z","3.0",{"rows":109,"total":11,"capped":17,"failed":11},[],[]]