Exploited vulnerabilities

ASUS

3 ASUS vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.

In the catalogue3
Last 12 months1
In ransomware campaigns0
Last addition17 December 2025

The vulnerabilities3

  1. 17 December 2025CVE-2025-59374Live UpdateASUS Live Update Embedded Malicious Code Vulnerability
  2. 2 June 2025CVE-2023-39780RT-AX55 RoutersASUS RT-AX55 Routers OS Command Injection Vulnerability
  3. 2 June 2025CVE-2021-32030RoutersASUS Routers Improper Authentication Vulnerability

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.

Alerts only on the products you use

With My Defence you receive alerts and briefings only on the products you use, ASUS included.

All vendorsThe catalogue on the CISA website