CVE-2026-11851Disclosure

LOWCVSS 5.9 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") in the web management interface of certain ASUS router models allows a remote authenticated user to disclose confidential information via a crafted request that bypasses existing input validation Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://www.asus.com/security-advisory/

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud92d
Disclosure
🚨*CVE* CVE-2026-11851 Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") in the web management interface of certain ASUS router models allows a remote aut… https://www.cve.org/CVERecord?id=CVE-2026-11851 ----- Traducción: CVE-2026-11851 Neu… http://infoflow.cloud`
Post summary
The tweet announces the disclosure of CVE‑2026‑11851, an SQL injection flaw affecting the web management interface of certain ASUS routers, and provides a link to the official CVE record. No PoC, exploit tools, active exploitation claims, patches, or debunking information are mentioned.
0000032
92 followersView on X
CVE@CVEnew92d
Disclosure
CVE-2026-11851 Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") in the web management interface of certain ASUS router models allows a remote aut… https://www.cve.org/CVERecord?id=CVE-2026-11851
Post summary
The snippet is a brief CVE disclosure highlighting an SQL injection flaw in certain ASUS router models, with no PoC, exploit, or mitigation mentioned.
00000418
57.8K followersView on X

Explore more

Back to dashboard