Brand
ASUS: actively exploited vulnerabilities
3 vulnerabilities in ASUS products (Routers (RT, GT, ZenWiFi), Live Update) are in CISA’s catalog of exploited vulnerabilities. Last added: December 17, 2025.
-
1 vulnerability added in the last 12 months
-
3 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one ASUS category to your radar, or open its page.
- Home and small-office routers, cameras and IoT 2 vulnerabilities
- Hardware, firmware and drivers 1 vulnerability
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- Routers (RT, GT, ZenWiFi) 2 vulnerabilities · Home routers and IoT
- Live Update 1 vulnerability · Hardware and firmware
Name used by CISA: ASUS. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this ASUS list.
Rank 1ASUS Live Update
CVE-2025-59374ASUS Live Update Embedded Malicious Code Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Dec 17, 2025
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 2ASUS Routers (RT, GT, ZenWiFi)
CVE-2021-32030CVE from 2021, added in 2025
ASUS Routers Improper Authentication Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Jun 2, 2025
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 3ASUS Routers (RT, GT, ZenWiFi)
CVE-2023-39780CVE from 2023, added in 2025
ASUS RT-AX55 Routers OS Command Injection Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Jun 2, 2025
- CISA deadline
- 21 days
- CVSS severity
- 8.8 (high)
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.