CVE-2026-13385Patch

LOWCVSS 9.5 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS router models allows a remote man-in-the-middle(MITM) user to make the router download and execute arbitrary command via a spoofed server. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://www.asus.com/security-advisory/

Weakness type (CWE)

CWE-295CWE-354

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
13 mentions across 7 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 10 signals
Technical details provided in 11 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 2d ago at 4 mentions (2026-07-23); latest day: 1
13 total mentions across 7 days

Deep dive

Activity timeline13 mentions / 7d

Signal classification3 categories

Patch

969.2%

Disclosure

323.1%

General

17.7%

Referenced assets10 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-15	2	Disclosure2
2026-07-16	1	Disclosure1
2026-07-21	1	Patch1
2026-07-22	3	Patch3
2026-07-23	4	Patch4
2026-07-30	1	Patch1
2026-08-23	1	General1

Full discourse13 posts

elhacker.NET@elhackernet84d
Patch
ASUS corrige vulnerabilidad crítica en routers que permite ejecución remota de comandos ASUS ha lanzado actualizaciones de seguridad críticas para solucionar una vulnerabilidad de alta gravedad en sus routers CVE-2026-13385 https://blog.elhacker.net/2026/07/asus-corrige-vulnerabilidad-critica-en.html
Post summary
ASUS has issued critical security patches for CVE‑2026‑13385, a vulnerability that enables remote command execution on its routers.
1912954.8K
141.8K followersView on X
Cyber Edition@CyberEdition84d
Patch
🔓 ASUS has patched a critical router flaw (CVE-2026-13385) that could let attackers execute remote commands through a man-in-the-middle attack. If you're using an affected ASUS router, update the firmware as soon as possible. #CyberSecurity #ASUS Read more: https://thecyberedition.com/asus-patches-critical-router-flaw-allowing-remote-command-execution-via-mitm/
Post summary
ASUS has released a firmware patch for CVE‑2026‑13385, a critical router flaw that could allow attackers to execute remote commands via a man‑in‑the‑middle attack. Users are urged to update firmware immediately.
01030142
739 followersView on X
Daily CyberSecurity@Daily_CyberSec86d
Patch
ASUS security advisories cover seven flaws. CVE-2026-13385 (CVSS 9.5) lets MITM attackers run commands on CN SKU routers. Update firmware now. #ASUS #ASUSWRT #RouterSecurity #CVE #InfoSec http://securityonline.info/asus-security-advisories/
Post summary
ASUS alert highlights a high‑severity vulnerability (CVE‑2026‑13385) allowing remote command execution via MITM, and urges users to update firmware immediately; no exploit code or active attacks are reported.
01010417
12.5K followersView on X
CCB Alert@CCBalert91d
Disclosure
Warning: #ASUS disclosed vulnerabilities in the Router Firmware, #GameSDK and other products. Most severe is the critical #CVE-2026-13385 which can lead to an #AitM attack due to improper certificate validation. Find out more at: https://www.asus.com/security-advisory/ #Patch #Patch #Patch
Post summary
ASUS publicly discloses CVE-2026-13385, describing improper certificate validation that could enable AitM, and points users to a security advisory for patch information.
01000261
7.2K followersView on X
IntegSec@integ_sec52d
General
CVE-2026-13385: ASUS Router Firmware Command Execution Bug - What It Means for Your Business and How to Respond https://hubs.li/Q04tXRTB0
Post summary
The post announces the ASUS router firmware command execution vulnerability (CVE-2026-13385) and hints at its business impact, but it does not provide exploitation details, mitigation steps, or evidence of active attacks.
0000023
33 followersView on X
iototsecnews@iototsecnews77d
Patch
ASUS Route の深刻な脆弱性 CVE-2026-13385 などが FIX：MITM 攻撃による任意のコード実行の恐れ https://iototsecnews.jp/2026/07/22/critical-asus-router-flaw-lets-remote-mitm-attackers-execute-arbitrary-commands/ ASUS ルーターに生じたチェック機能の不備を突く第三者に、通信への割り込みを許す欠陥が公表されました。経路上に入り込んだ攻撃者により、デバイスの管理権限の奪取や通信内容の傍受が引き起こされる恐れがあります。本件は CVE-2026-13385 として管理されています。安全な利用のためにも、提供されている修正済みの最新ファームウェアへ速やかに更新し、外部からの遠隔管理機能を制限しておくことが必要です。 #Asus #Router #Vulnerability
Post summary
The article discloses a critical MITM vulnerability (CVE‑2026‑13385) in ASUS routers that could lead to arbitrary code execution, and urges applying the latest patched firmware and limiting remote management.
00000127
503 followersView on X
JNR Management@jnrmanagement84d
Patch
🚨 Critical ASUS Router Vulnerability CVE-2026-13385 — Remote MITM Attackers Can Execute Arbitrary Commands Across Three Firmware Branches — Patch Now. 👉 Read More: https://www.jnrmanagement.com/asus-router-cve-2026-13385-critical-flaw-enables-remote-mitm-command-execution.html #CyberSecurity #JNRManagement #CISO #ASUS #RouterSecurity #CVE202613385 https://t.co/I7QwmKY5qw
Post summary
A critical ASUS router vulnerability (CVE‑2026‑13385) allows remote MITM attackers to execute arbitrary commands, and the post urges users to apply available patches, but it provides no proof of exploitation or detailed fix instructions.
0000034
177 followersView on X
Minery Report@MineryReport84d
Patch
@elhackernet CVE-2026-13385 en routers ASUS: escenario de pesadilla para el SOC. Un atacante con acceso remoto al router controla el punto de entrada a toda la red. Los routers en entornos corporativos suelen quedar fuera del ciclo de parches. Actualizar firmware ya, no mañana.
Post summary
The tweet flags CVE-2026-13385 affecting ASUS routers and urges users to update firmware immediately to mitigate the risk.
0000050
301 followersView on X
Rıdvan Yağlı@ridvanyagli84d
Patch
🚨 ASUS, birden fazla router modelini etkileyen kritik bir uzaktan komut çalıştırma (RCE) açığını (CVE-2026-13385) yamaladı. Açık; 3.0.0.4_386, 3.0.0.4_388 ve 3.0.0.6_102 firmware serilerini kullanan çok sayıda ASUS router'ı etkiliyor. Sorunun, router yönetim bileşenindeki yetersiz girdi doğrulamasından kaynaklandığı ve belirli koşullarda kimlik doğrulaması gerektirmeden uzaktan komut çalıştırılmasına olanak tanıdığı belirtildi. Başarılı bir istismar sonucunda saldırgan router'ı ele geçirebilir, ağ trafiğini dinleyebilir veya yönlendirebilir, cihazı botnet'e dahil edebilir ya da ağdaki diğer sistemlere sıçrama noktası olarak kullanabilir. ASUS, etkilenen tüm cihazlar için güncel firmware sürümlerini yayımladı. Kullanıcıların güncellemeyi uygulamaları, Remote Administration özelliğini devre dışı bırakmaları ve yönetim arayüzünü internete açık bırakmamaları tavsiye ediliyor.
Post summary
ASUS has released firmware updates to fix a critical remote code execution vulnerability affecting multiple router models and advises users to apply the patches and disable remote administration.
00000193
1.2K followersView on X
TECHEPAGES@techepages84d
Patch
🚨 ASUS Patches Critical Router Vulnerability ASUS released urgent fixes for CVE-2026-13385 (CVSS 9.8 – Critical). This high-severity flaw allows unauthenticated remote command execution on multiple firmware branches (3.0.0.4_386, 3.0.0.4_388, 3.0.0.6_102 series). Attackers could fully compromise routers, intercept traffic, or build botnets. Patch immediately.
Post summary
ASUS issued an urgent patch for the critical router vulnerability CVE-2026-13385, exposing high‑severity remote command execution across multiple firmware branches.
0000050
30 followersView on X
The Daily Tech Feed@dailytechonx84d
Patch
ASUS has released critical firmware updates to address CVE-2026-13385, a high-severity vulnerability affecting multiple router models. This flaw could allow remote attackers to execute arbitrary commands, potentially compromising networks. Users are strongly urged to update their firmware immediately and review security configurations to mitigate risks. #ASUS #RouterSecurity #FirmwareUpdate #CVE202613385 #CyberSecurity #NetworkSecurity https://thedailytechfeed.com/asus-releases-critical-firmware-updates-to-patch-router-vulnerability/
Post summary
ASUS has issued critical firmware updates to patch CVE‑2026‑13385, a high‑severity vulnerability enabling remote command execution; users are urged to apply the patch immediately.
0000063
548 followersView on X
Infoflowcloud@infoflowcloud92d
Disclosure
🚨*CVE* CVE-2026-13385 An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS router models allows a remote man-in-the-middle(MITM) user to make… https://www.cve.org/CVERecord?id=CVE-2026-13385 ----- Traducción: CVE-2026-13385 Una… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑13385, describing improper validation that could allow a remote MITM on ASUS routers, but offers no PoC, exploit code, patch, or indication of active exploitation.
0000026
92 followersView on X
CVE@CVEnew92d
Disclosure
CVE-2026-13385 An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS router models allows a remote man-in-the-middle(MITM) user to make… https://www.cve.org/CVERecord?id=CVE-2026-13385
Post summary
The statement announces CVE‑2026‑13385, a vulnerability in certain ASUS routers that permits a remote man‑in‑the‑middle attack due to improper integrity check and certificate validation, without providing further exploitation or mitigation details.
00000568
57.8K followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-13385

Cyber Edition[verified]@CyberEditionPatch

ASUS has released a firmware patch for CVE‑2026‑13385, a critical router flaw that could allow attackers to execute remote commands via a man‑in‑the‑middle attack. Users are urged to update firmware immediately.

IntegSec[verified]@integ_secGeneral

The post announces the ASUS router firmware command execution vulnerability (CVE-2026-13385) and hints at its business impact, but it does not provide exploitation details, mitigation steps, or evidence of active attacks.

Minery Report[verified]@MineryReportPatch

The tweet flags CVE-2026-13385 affecting ASUS routers and urges users to update firmware immediately to mitigate the risk.

Rıdvan Yağlı[verified]@ridvanyagliPatch

ASUS has released firmware updates to fix a critical remote code execution vulnerability affecting multiple router models and advises users to apply the patches and disable remote administration.

TECHEPAGES[verified]@techepagesPatch

ASUS issued an urgent patch for the critical router vulnerability CVE-2026-13385, exposing high‑severity remote command execution across multiple firmware branches.

The Daily Tech Feed[verified]@dailytechonxPatch

ASUS has issued critical firmware updates to patch CVE‑2026‑13385, a high‑severity vulnerability enabling remote command execution; users are urged to apply the patch immediately.

elhacker.NET@elhackernetPatch

ASUS has issued critical security patches for CVE‑2026‑13385, a vulnerability that enables remote command execution on its routers.

Daily CyberSecurity@Daily_CyberSecPatch

ASUS alert highlights a high‑severity vulnerability (CVE‑2026‑13385) allowing remote command execution via MITM, and urges users to update firmware immediately; no exploit code or active attacks are reported.