VulnSocial

CVE-2018-5999Active Exploitation(asus / asuswrt)

LOWCVSS 9.8 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for asus asuswrt systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

An issue was discovered in AsusWRT before 3.0.0.4.384_10007. In the handle_request function in router/httpd/httpd.c, processing of POST requests continues even if authentication fails.

asus CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Exploit / PoC references
Other references

Priority

LOW

Exploitation

ACTIVE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • asuswrt

Threat summary

  • Active exploitation appears in 3 classified signals
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 3 signals
  • Technical details provided in 1 signal
  • Peaked 2d ago at 1 mentions (2026-05-24); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
asus
Products
asuswrt

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-05-24: 1Mentions · 2026-05-26: 1Mentions · 2026-05-27: 1Active Exploitation · 2026-05-24: 1Active Exploitation · 2026-05-26: 1Active Exploitation · 2026-05-27: 1Technical Details · 2026-05-24: 105-2405-2605-27
Signal classification1 categories
Active Exploitation
3100.0%
Referenced assets2 URLs
Full discourse3 posts
  • VulnCheck@VulnCheckAI
    Active Exploitation

    ICYMI: @ISMG_News highlighted a recent VulnCheck Canary Intelligence report showing RondoDox exploiting CVE-2018-5999, a nearly decade-old ASUS router flaw affecting internet-exposed edge devices. Full story: https://www.bankinfosecurity.com/rondodox-botnet-exploits-2018-flaw-in-asus-routers-a-31768 https://t.co/zAfbzhrVP7

    Post summary

    RondoDox is actively exploiting the long‑known ASUS router vulnerability CVE‑2018‑5999, but no PoC, patch, or detailed technical information is provided.

    00002161
    752 followersView on X
  • Blackwired@blackwired32799
    Active Exploitation

    Cybersecurity firm VulnCheck’s latest research reveals that cybercriminals are now targeting old models of ASUS routers by exploiting a software vulnerability from 2018, tracked as CVE-2018-5999. https://hackread.com/rondodox-botnet-2018-vulnerability-hijack-asus-routers/

    Post summary

    Cybercriminals are currently exploiting the 2018 CVE-2018-5999 vulnerability in legacy ASUS routers, confirming active exploitation, while no patch, PoC, or technical details are detailed in the post.

    0000039
    32 followersView on X
  • ねこさん⚡(ΦωΦ)@catnap707
    Active Exploitation

    RondoDox Botnet Exploits Critical 2018 Vulnerability to Hijack ASUS Routers https://hackread.com/rondodox-botnet-2018-vulnerability-hijack-asus-routers/ "that cybercriminals are now targeting old models of ASUS routers by exploiting a software vulnerability from 2018, tracked as CVE-2018-5999."

    Post summary

    The text reports that cybercriminals are actively exploiting CVE-2018-5999 to hijack ASUS routers, with no PoC or patch information provided.

    00000133
    3.5K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
OSasusasuswrt---

Explore more

Back to dashboardasus CVEsasuswrt vulnerabilities